SAML at IDP uses rsa-v15 and rsa-OEAP outdated crypto algorithms

Products

• SITEMINDER
• CA Single Sign On Federation (SiteMinder)

Issue/Introduction

 

When running Federation Services, the IdP signature uses outdated
encryption as "rsa-v15" and "rsa-OEAP".

 

Resolution

 

As per documentation, those are the only algorithms available at the
moment for digital signature (1).

 

Additional Information

 

(1)

    Digital Signing and Private Key Algorithms

      Encryption Key Algorithms
      RSA-V15, RSA-OEAP

    https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/configuring/partnership-federation/encryption-and-decryption-algorithms.html