[java-identity-provider COMMIT] in /trunk/idp-conf/src/main/resources/system/conf: profile-defaults.xml relying-party...

noreply at shibboleth.net noreply at shibboleth.net
Thu Jun 19 13:00:12 EDT 2014


Author: scantor
Date: Thu Jun 19 13:00:12 2014
New Revision: 6123

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=6123&view=rev
Log:
Clean up artifact defaults, fix inbound security flow for ECP

Modified:
    trunk/idp-conf/src/main/resources/system/conf/profile-defaults.xml
    trunk/idp-conf/src/main/resources/system/conf/relying-party-system.xml

Modified: trunk/idp-conf/src/main/resources/system/conf/profile-defaults.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/conf/profile-defaults.xml?rev=6123&r1=6122&r2=6123&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/conf/profile-defaults.xml (original)
+++ trunk/idp-conf/src/main/resources/system/conf/profile-defaults.xml Thu Jun 19 13:00:12 2014
@@ -10,40 +10,33 @@
 	
 	<context:property-placeholder location="file:///${idp.home}/conf/idp.properties" />
 	
-	<!-- The profile defaults. Firstly the artifact and InbouldFlowId parameters 
+	<!-- The profile defaults. Firstly the artifact and InboundFlowId parameters 
 
-            TODO establish correct values for all values of ArtifactServiceURL and ArtifactServiceIndex
-            TODO establish correct values for ECP, Logout InboundFlowId 
+            TODO establish correct values for Logout InboundFlowId 
     
      -->
 
     <!--  SAML2 -->
     <bean id="shibboleth.SAML2.Artifact.InboundFlowId" class="java.lang.String"
-        c:_0="security-policy/soap" /><!-- TODO -->
+        c:_0="security-policy/soap" />
         
-    <bean id="shibboleth.SAML2.Logout.ArtifactServiceURL" class="java.lang.String"
-        c:_0="https://idp.example.org/Logout" />
     <bean id="shibboleth.SAML2.Logout.ArtifactServiceIndex" class="java.lang.String"
-        c:_0="3214" />
+        c:_0="${idp.artifact.endpointIndex:1}" />
     <bean id="shibboleth.SAML2.Logout.InboundFlowId" class="java.lang.String"
-        c:_0="SecurityPolicy.SAML2Logout" /><!-- TODO -->
+        c:_0="security-policy/saml2-logout" /><!-- TODO -->
 
-    <bean id="shibboleth.SAML2.AttributeQuery.ArtifactServiceURL" class="java.lang.String"
-        c:_0="https://idp.example.org/AttributeQuery" />
     <bean id="shibboleth.SAML2.AttributeQuery.ArtifactServiceIndex" class="java.lang.String"
-        c:_0="2143" />
+        c:_0="${idp.artifact.endpointIndex:1}" />
     <bean id="shibboleth.SAML2.AttributeQuery.InboundFlowId" class="java.lang.String"
         c:_0="security-policy/soap" />
 
-    <bean id="shibboleth.SAML2.BrowserSSO.ArtifactServiceURL" class="java.lang.String"
-        c:_0="https://idp.example.org/SSO" />
     <bean id="shibboleth.SAML2.BrowserSSO.ArtifactServiceIndex" class="java.lang.String"
-        c:_0="1111" />
+        c:_0="${idp.artifact.endpointIndex:1}" />
     <bean id="shibboleth.SAML2.BrowserSSO.InboundFlowId" class="java.lang.String"
         c:_0="security-policy/saml2-sso" />
         
     <bean id="shibboleth.SAML2.ECP.InboundFlowId" class="java.lang.String"
-        c:_0="SecurityPolicy.SAML2ECP" /><!-- TODO -->
+        c:_0="security-policy/saml2-sso" />
 
     <!--  SAML2 - Liberty -->
     <bean id="shibboleth.SAML2.SSOS.InboundFlowId" class="java.lang.String"
@@ -53,30 +46,12 @@
     <bean id="shibboleth.SAML1.Artifact.InboundFlowId" class="java.lang.String"
         c:_0="security-policy/soap" />
         
-    <bean id="shibboleth.SAML1.AttributeQuery.ArtifactServiceURL" class="java.lang.String"
-        c:_0="https://idp.example.org/AttributeQuery/SAML1" />
     <bean id="shibboleth.SAML1.AttributeQuery.ArtifactServiceIndex" class="java.lang.String"
-        c:_0="432100" />
+        c:_0="${idp.artifact.endpointIndex:1}" />
     <bean id="shibboleth.SAML1.AttributeQuery.InboundFlowId" class="java.lang.String"
         c:_0="security-policy/soap" />
         
-    <bean id="shibboleth.SAML1.BrowserSSO.ArtifactServiceURL" class="java.lang.String"
-        c:_0="https://idp.example.org/SSO/SAML1" />
-    <bean id="shibboleth.SAML1.BrowserSSO.ArtifactServiceIndex" class="java.lang.String"
-        c:_0="1111" />
     <bean id="shibboleth.SAML1.BrowserSSO.InboundFlowId" class="java.lang.String"
         c:_0="security-policy/shibboleth-sso" />
-
-    <bean id="shibboleth.LegacyRelyingParty.EncryptedKeyResolver"
-            class="org.opensaml.xmlsec.encryption.support.ChainingEncryptedKeyResolver">
-        <constructor-arg name="encKeyResolvers">
-            <util:list>
-                <bean class="org.opensaml.xmlsec.encryption.support.InlineEncryptedKeyResolver" />
-                <bean class="org.opensaml.saml.saml2.encryption.EncryptedElementTypeEncryptedKeyResolver" />
-                <bean class="org.opensaml.xmlsec.encryption.support.SimpleRetrievalMethodEncryptedKeyResolver" />
-                <bean class="org.opensaml.xmlsec.encryption.support.SimpleKeyInfoReferenceEncryptedKeyResolver" />
-            </util:list>
-        </constructor-arg>
-    </bean>
             

[... 18 lines stripped ...]


More information about the commits mailing list