[JIRA] Created: (SSPCPP-474) Logger not logging events when processing EncryptedAttribute elements in SAML response

rwhiten1@idp.protectnetwork.org (JIRA) noreply at shibboleth.net
Fri Jul 20 16:36:55 EDT 2012


Logger not logging events when processing EncryptedAttribute elements in SAML response
--------------------------------------------------------------------------------------

                 Key: SSPCPP-474
                 URL: https://issues.shibboleth.net/jira/browse/SSPCPP-474
             Project: Shibboleth SP - C++
          Issue Type: Bug
      Security Level: Standard (Standard bug, may impact functionality but does not represent a security vulnerability )
          Components: SAML 2.0 Single Sign-On
    Affects Versions: 2.3
         Environment: External to Shibboleth
            Reporter: rwhiten1 at idp.protectnetwork.org
            Assignee: Scott Cantor
            Priority: Minor
         Attachments: CompleteSamlResponse.xml

The partner we are working with is using IBM Tivoli IDP with encryption turned on.  This is IDP initiated SSO.  Their SAML responses contains encrypted attributes, encompassed in <saml:EncryptedAttribute> tags.  Shibboleth SP does not appear to decrypt the attributes, and also does not appear to log any events surrounding the decryption. Attached is the SAML response.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira


More information about the commits mailing list