For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kunjan's avatar
kunjan
Icon for Nimbostratus rankNimbostratus
Apr 04, 2015

You may want to verify if the signature method used is rsa-sha1 for the assertion signing.

 

 

boneyard's avatar
boneyard
Icon for MVP rankMVP
Apr 05, 2015
i don't sign the assertion at all currently, only the artifact response. why would it have to be rsa-sha1? i recall reading rsa-sha-256 is the advised minimum these days.