From b62fae53ecb7a607a9a28b9cc53aa0c8b150c9e9 Mon Sep 17 00:00:00 2001 From: Jonathan Perret Date: Thu, 25 Sep 2025 14:47:28 +0200 Subject: [PATCH] =?UTF-8?q?=F0=9F=94=A7(cnb)=20request=20signed=20assertio?= =?UTF-8?q?ns=20or=20response?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit At least in the "recette" environment responses are not signed, but assertions are. --- src/satosa/config/cnb/plugins/backends/saml2_backend.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/satosa/config/cnb/plugins/backends/saml2_backend.yaml b/src/satosa/config/cnb/plugins/backends/saml2_backend.yaml index 27c034b..11b5685 100644 --- a/src/satosa/config/cnb/plugins/backends/saml2_backend.yaml +++ b/src/satosa/config/cnb/plugins/backends/saml2_backend.yaml @@ -34,7 +34,9 @@ config: width: '200' height: '200' authn_requests_signed: true - want_response_signed: true + want_response_signed: false + want_assertions_signed: false + want_assertions_or_response_signed: true signing_algorithm: 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256' allow_unsolicited: true name_id_format: