(ADFS) SP-Initiated Single Logout (SLO) / SHA256

atapiafl@cisco.com — Thu, 14 Dec 2017 15:10:04 GMT

Hi, is ISE going to support SHA256 to do SLO in the next releases?

Right now we have this info:

"For this to work we need to set the secure hash algorithm to SHA1 instead of the default SHA-256.

This is set in ISE relying party trust properties under advanced.

If you don’t set this you’ll get the following message in to the ADFS event log:

Event ID: 378

SAML request is not signed with expected signature algorithm. SAML request is signed with

Thanks

Re: (ADFS) SP-Initiated Single Logout (SLO) / SHA256

Jason Kunst — Thu, 14 Dec 2017 15:25:30 GMT

Please work with the ISE product managers on features. We don’t discuss futures in public forum