ngrosc

hi guys sorry for the late answer. we're using https, not http. so that should not be the the main issue. as IDP, we're using keycloack with the following config:...

Hi guys Meanwhile we were able to secure the connection between our IDP and Cloudstack and are now encrypting the assertions. But the initial issue still exists. When someone removes...

Hi Rohit I completely agree with you. If the assertion is encrypted or not is an IDP "issue". But if a signature is present or not, has to be enforced...

@mlsorensen From my point of view, the origin of the IDP data doesen't matter. As long as Cloudstack does not enforce a signature, any unsigned message would be accepted and...