Hello,
Using VS 2008 with .Net Framework 3.5 on windows 2003 server.
We have implemented SSO with SAML for our client. We work at service provider end where we validate the Signed XML token generated from client's system.
As of now whatever signed documents we came across were using the Signature Algorithm "rsa-sha1", but now we have new customer who sends a file with the signature algorithm as "rsa-sha256" and here is the problem started.
I am not having any background on either on web security or on SSO SAML :( but I have a look at the current implementation and it is as below -
public static string VerifySignature()
{
if (m_xmlDoc == null)
&n ...
Go to the complete details ...