With the latest 1.4.0 release, the SP metadata file generated by library can not be imported into ADFS when configuring Relying Party Trust. The error message from ADFS is "Cannot resolve the '' URI in the signature to compute the digest".
Looking at the SP metadata, the "Signature" node is moved out of node "SPSSODescriptor" and becomes a sibling of node "SPSSODescriptor". Looks like the 1.4.0 version introduce this in purpose.
Looks like two additional tasks need to be done if the position change is introduced.
1 Add "ID" attribute for node "SPSSODescriptor"
2 Add the attribute "URI" for node "Reference" and value of "URI" is "pointing" to the node "SPSSODescriptor"
Correct me if I am wrong.
With the latest 1.4.0 release, the SP metadata file generated by library can not be imported into ADFS when configuring Relying Party Trust. The error message from ADFS is "Cannot resolve the '' URI in the signature to compute the digest".
Looking at the SP metadata, the "Signature" node is moved out of node "SPSSODescriptor" and becomes a sibling of node "SPSSODescriptor". Looks like the 1.4.0 version introduce this in purpose.
Looks like two additional tasks need to be done if the position change is introduced.
1 Add "ID" attribute for node "SPSSODescriptor"
2 Add the attribute "URI" for node "Reference" and value of "URI" is "pointing" to the node "SPSSODescriptor"
Correct me if I am wrong.