From ac1f83ff0fa8dbb18c9f627202840d58948ab0bc Mon Sep 17 00:00:00 2001
From: Davis Carlson <daviscarlson@uvic.ca>
Date: Fri, 31 Jul 2026 14:54:26 -0700
Subject: [PATCH] Fixed logic to check if SP Metadata contains support for
 SHA-256 signing

---
 ADFSToolkit/Private/Get-ADFSTkSecureHashAlgorithm.ps1 | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ADFSToolkit/Private/Get-ADFSTkSecureHashAlgorithm.ps1 b/ADFSToolkit/Private/Get-ADFSTkSecureHashAlgorithm.ps1
index 3fb4b2f..86be6ba 100644
--- a/ADFSToolkit/Private/Get-ADFSTkSecureHashAlgorithm.ps1
+++ b/ADFSToolkit/Private/Get-ADFSTkSecureHashAlgorithm.ps1
@@ -11,8 +11,8 @@ param (
 $SignatureAlgorithm = "http://www.w3.org/2000/09/xmldsig#rsa-sha1"
 
 #check if md:extentions is not null
-if(![string]::IsNullOrEmpty($sp.Extension) -and [string]::IsNullOrEmpty($sp.Extensions.SigningMethod)){
-    $SigningMethods = $sp.Extension.SigningMethod
+if(![string]::IsNullOrEmpty($sp.Extensions) -and ![string]::IsNullOrEmpty($sp.Extensions.SigningMethod)){
+    $SigningMethods = $sp.Extensions.SigningMethod
     if(($SigningMethods -is [string]) -and $SigningMethods -eq "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" ){
         $SignatureAlgorithm = "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"
     }