[prev in list] [next in list] [prev in thread] [next in thread]
List: shibboleth-users
Subject: Re: Notice from Adobe about IdP SHA-1 certificates
From: Lee Foltz <foltz2 () oakland ! edu>
Date: 2020-07-21 18:28:51
Message-ID: CAPcR9uSxdQ85ztDBxdhS_aT6G+0qUgXeBDJc8a-Fp=51Su56Bg () mail ! gmail ! com
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
Yesterday I followed these instructions from Abobe and had to Add new IDP,
which was just uploading our metadata again, then they provided a link to
download or use URL to use Adobe new SP metadata with SHA-256 certificate.
https://helpx.adobe.com/enterprise/using/set-up-identity.html#migrateesaml
There is also a Test feature to test the new IDP setup with the new
Adobe SP metadata, you can also revert changes and roll back to other IDP
still configured (SHA-1) if your new setup doesn't work.
We tested and had no issues with Federated Login on new setup with new
Adobe SP metadata.
Hope this helps everyone.
On Tue, Jul 21, 2020 at 9:43 AM Cantor, Scott <cantor.2@osu.edu> wrote:
> On 7/21/20, 9:38 AM, "users on behalf of Peter Schober" <
> users-bounces@shibboleth.net on behalf of peter.schober@univie.ac.at>
> wrote:
>
> > I'll definitively be keeping a reference to this thread handy as I
> > feel I'll be needing it in the coming months.
>
> This topic comes up nearly every ACAMP with no real solution, but we need
> some kind of neutral venue for information sharing that we can use to post
> this sort of knowledge that people will see.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe@shibboleth.net
>
--
Lee Foltz
Oakland University - UTS
Senior Identity and Access Management Engineer
248-370-2675
[Attachment #5 (text/html)]
<div dir="ltr">Yesterday I followed these instructions from Abobe and had to Add new \
IDP, which was just uploading our metadata again, then they provided a link to \
download or use URL to use Adobe new SP metadata with SHA-256 certificate.<div><a \
href="https://helpx.adobe.com/enterprise/using/set-up-identity.html#migrateesaml">http \
s://helpx.adobe.com/enterprise/using/set-up-identity.html#migrateesaml</a><br></div><div><br></div><div>There \
is also a Test feature to test the new IDP setup with the new Adobe SP metadata, \
you can also revert changes and roll back to other IDP still configured (SHA-1) if \
your new setup doesn't work.</div><div>We tested and had no issues with Federated \
Login on new setup with new Adobe SP metadata.</div><div><br></div><div>Hope this \
helps everyone.</div></div><br><div class="gmail_quote"><div dir="ltr" \
class="gmail_attr">On Tue, Jul 21, 2020 at 9:43 AM Cantor, Scott <<a \
href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>> wrote:<br></div><blockquote \
class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid \
rgb(204,204,204);padding-left:1ex">On 7/21/20, 9:38 AM, "users on behalf of \
Peter Schober" <<a href="mailto:users-bounces@shibboleth.net" \
target="_blank">users-bounces@shibboleth.net</a> on behalf of <a \
href="mailto:peter.schober@univie.ac.at" \
target="_blank">peter.schober@univie.ac.at</a>> wrote:<br> <br>
> I'll definitively be keeping a reference to this thread handy as I<br>
> feel I'll be needing it in the coming months.<br>
<br>
This topic comes up nearly every ACAMP with no real solution, but we need some kind \
of neutral venue for information sharing that we can use to post this sort of \
knowledge that people will see.<br> <br>
-- Scott<br>
<br>
<br>
-- <br>
For Consortium Member technical support, see <a \
href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" \
target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br> To \
unsubscribe from this list send an email to <a \
href="mailto:users-unsubscribe@shibboleth.net" \
target="_blank">users-unsubscribe@shibboleth.net</a><br> </blockquote></div><br \
clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div \
dir="ltr"><div><div>Lee Foltz</div><div>Oakland University - UTS</div><div>Senior \
Identity and Access Management Engineer</div><div> \
</div><div>248-370-2675</div></div></div></div>
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic