AD FS 2.0是否支持用于签名算法的DSA-SHA1？ [英] Does AD FS 2.0 support DSA-SHA1 for Signature Algorithm?

问题描述

我有OIF作为IDP，AD FS 2.0作为SP。 

用户通过身份验证后，OIF将断言发送给由DSA签署的AD FS 2.0- SHA1。

最后，AD FS 2.0的身份验证失败。

我看到AD FS支持RSA-SHA1和RSA-SHA256作为  ;签名算法。但它是否支持DSA-SHA1？

解决方案

http://technet.microsoft.com/en-us/library/ff849212(WS.10).aspx  只是提到将签名算法设置为"SHA-1"。它指的是RSA-SHA1。在PowerShell命令行中，您可以设置数字签名算法命名空间，尝试使用
http：/ /www.w3.org/2000/09/xmldsig#dsa-sha1

不确定这是否支持或将起作用。

谢谢，

I have OIF as IDP and AD FS 2.0 as a SP. 

After user authenticated, OIF send out the assertion to AD FS 2.0 which signed by DSA-SHA1.

At the end, the authentication at AD FS 2.0 failed.

I saw that AD FS support RSA-SHA1 and RSA-SHA256 as Signature Algorithm. But does it support DSA-SHA1?

解决方案

The step-by-step guide at http://technet.microsoft.com/en-us/library/ff849212(WS.10).aspx just mentions setting the signing algorithm to "SHA-1" which refers to RSA-SHA1. From the PowerShell command-line you can set the digital signature algorithm namespace, try using http://www.w3.org/2000/09/xmldsig#dsa-sha1

Not sure if this supported or will work.

Thanks,

这篇关于AD FS 2.0是否支持用于签名算法的DSA-SHA1？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！