For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kunjan_118660's avatar
kunjan_118660
Icon for Cumulonimbus rankCumulonimbus
Apr 04, 2015

You may want to verify if the signature method used is rsa-sha1 for the assertion signing.

 

 

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Apr 05, 2015
    i don't sign the assertion at all currently, only the artifact response. why would it have to be rsa-sha1? i recall reading rsa-sha-256 is the advised minimum these days.