[java-identity-provider COMMIT] in /trunk/idp-conf/src/main/resources: conf/authn/authn-comparison.xml conf/relying-p...
noreply at shibboleth.net
noreply at shibboleth.net
Wed Jul 9 13:33:16 EDT 2014
Author: scantor
Date: Wed Jul 9 13:33:16 2014
New Revision: 6257
URL: http://svn.shibboleth.net/view/java-identity-provider?rev=6257&view=rev
Log:
IDP-435 - addtitional related fix so SAML 1 authn method matching works
Modified:
trunk/idp-conf/src/main/resources/conf/authn/authn-comparison.xml
trunk/idp-conf/src/main/resources/conf/relying-party.xml
trunk/idp-conf/src/main/resources/system/conf/general-authn-system.xml
Modified: trunk/idp-conf/src/main/resources/conf/authn/authn-comparison.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/conf/authn/authn-comparison.xml?rev=6257&r1=6256&r2=6257&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/conf/authn/authn-comparison.xml (original)
+++ trunk/idp-conf/src/main/resources/conf/authn/authn-comparison.xml Wed Jul 9 13:33:16 2014
@@ -45,6 +45,7 @@
<util:map id="shibboleth.AuthnComparisonRules">
<!-- Exact matching, this can be left as-is. -->
+ <entry key-ref="shibboleth.SAMLAuthnMethodExact" value-ref="shibboleth.ExactMatchFactory"/>
<entry key-ref="shibboleth.SAMLACClassRefExact" value-ref="shibboleth.ExactMatchFactory"/>
<entry key-ref="shibboleth.SAMLACDeclRefExact" value-ref="shibboleth.ExactMatchFactory"/>
Modified: trunk/idp-conf/src/main/resources/conf/relying-party.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/conf/relying-party.xml?rev=6257&r1=6256&r2=6257&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/conf/relying-party.xml (original)
+++ trunk/idp-conf/src/main/resources/conf/relying-party.xml Wed Jul 9 13:33:16 2014
@@ -51,10 +51,24 @@
<bean parent="RelyingPartyByName" c:relyingPartyIds="https://sp.example.org">
<property name="profileConfigurations">
<util:list>
- <ref bean="Shibboleth.SSO" />
+ <bean parent="Shibboleth.SSO">
+ <property name="defaultAuthenticationMethods">
+ <util:list>
+ <bean parent="shibboleth.SAML1AuthenticationMethod"
+ c:method="urn:oasis:names:tc:SAML:1.0:am:password" />
+ </util:list>
+ </property>
+ </bean>
<ref bean="SAML1.AttributeQuery" />
<ref bean="SAML1.ArtifactResolution" />
- <ref bean="SAML2.SSO" />
+ <bean parent="SAML2.SSO">
+ <property name="defaultAuthenticationMethods">
+ <util:list>
+ <bean parent="shibboleth.SAML2AuthnContextClassRef"
+ c:classRef="urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport" />
+ </util:list>
+ </property>
+ </bean>
<ref bean="SAML2.ECP" />
<ref bean="SAML2.AttributeQuery" />
<ref bean="SAML2.ArtifactResolution" />
Modified: trunk/idp-conf/src/main/resources/system/conf/general-authn-system.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/conf/general-authn-system.xml?rev=6257&r1=6256&r2=6257&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/conf/general-authn-system.xml (original)
+++ trunk/idp-conf/src/main/resources/system/conf/general-authn-system.xml Wed Jul 9 13:33:16 2014
@@ -117,6 +117,9 @@
class="net.shibboleth.idp.authn.principal.impl.InexactPrincipalEvalPredicateFactory" />
<!-- Boilerplate objects needed to key the installation of matching rules in the comparison registry. -->
+
+ <bean id="shibboleth.SAMLAuthnMethodExact" class="net.shibboleth.utilities.java.support.collection.Pair"
+ p:first="#{ T(net.shibboleth.idp.saml.authn.principal.AuthenticationMethodPrincipal) }" p:second="exact"/>
<bean id="shibboleth.SAMLACClassRefExact" class="net.shibboleth.utilities.java.support.collection.Pair"
p:first="#{ T(net.shibboleth.idp.saml.authn.principal.AuthnContextClassRefPrincipal) }" p:second="exact"/>
More information about the commits
mailing list