[java-identity-provider COMMIT] in /trunk/idp-conf/src/main/resources: conf/relying-party.xml system/conf/profile-int...

[noreply at shibboleth.net]

Author: putmanb
Date: Wed Aug 12 22:09:46 2015
New Revision: 7672

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=7672&view=rev
Log:
Checkpoint some work on composing the Liberty IDWSF SSOS flow for delegation.

Added:
    trunk/idp-conf/src/main/resources/system/flows/saml/saml2/idwsf-ssos-beans.xml   (with props)
    trunk/idp-conf/src/main/resources/system/flows/saml/saml2/idwsf-ssos-flow.xml   (with props)
    trunk/idp-conf/src/main/resources/system/flows/saml/saml2/idwsf-ssos-security-beans.xml   (with props)
    trunk/idp-conf/src/main/resources/system/flows/saml/saml2/idwsf-ssos-security-flow.xml   (with props)
Modified:
    trunk/idp-conf/src/main/resources/conf/relying-party.xml
    trunk/idp-conf/src/main/resources/system/conf/profile-intercept-system.xml
    trunk/idp-conf/src/main/resources/system/conf/relying-party-system.xml
    trunk/idp-conf/src/main/resources/system/conf/saml-binding-config.xml
    trunk/idp-conf/src/main/resources/system/conf/webflow-config.xml

Modified: trunk/idp-conf/src/main/resources/conf/relying-party.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/conf/relying-party.xml?rev=7672&r1=7671&r2=7672&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/conf/relying-party.xml	(original)
+++ trunk/idp-conf/src/main/resources/conf/relying-party.xml	Wed Aug 12 22:09:46 2015
@@ -42,6 +42,7 @@
                 <ref bean="SAML2.Logout" />
                 <ref bean="SAML2.AttributeQuery" />
                 <ref bean="SAML2.ArtifactResolution" />
+                <ref bean="Liberty.SSOS" />
             </list>
         </property>
     </bean>

Modified: trunk/idp-conf/src/main/resources/system/conf/profile-intercept-system.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/conf/profile-intercept-system.xml?rev=7672&r1=7671&r2=7672&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/conf/profile-intercept-system.xml	(original)
+++ trunk/idp-conf/src/main/resources/system/conf/profile-intercept-system.xml	Wed Aug 12 22:09:46 2015
@@ -27,6 +27,7 @@
                 <bean id="intercept/security-policy/saml2-sso" parent="shibboleth.InterceptFlow" />
                 <bean id="intercept/security-policy/saml2-ecp" parent="shibboleth.InterceptFlow" />
                 <bean id="intercept/security-policy/saml2-slo" parent="shibboleth.InterceptFlow" />
+                <bean id="intercept/security-policy/saml2-idwsf-ssos" parent="shibboleth.InterceptFlow" />
                 <bean id="intercept/security-policy/saml-soap" parent="shibboleth.InterceptFlow" />
             </list>
         </property>

Modified: trunk/idp-conf/src/main/resources/system/conf/relying-party-system.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/conf/relying-party-system.xml?rev=7672&r1=7671&r2=7672&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/conf/relying-party-system.xml	(original)
+++ trunk/idp-conf/src/main/resources/system/conf/relying-party-system.xml	Wed Aug 12 22:09:46 2015
@@ -102,11 +102,10 @@
         p:inboundInterceptorFlows="security-policy/saml-soap"
         p:encryptionOptional="%{idp.encryption.optional:false}" />
 
-    <!--
-    TBD: not yet implemented    
     <bean id="Liberty.SSOS"
-        class="net.shibboleth.idp.saml.idwsf.profile.config.SSOSProfileConfiguration" />
-    -->
+        class="net.shibboleth.idp.saml.idwsf.profile.config.SSOSProfileConfiguration" 
+            p:inboundInterceptorFlows="security-policy/saml2-idwsf-ssos" 
+            p:encryptionOptional="%{idp.encryption.optional:false}" />
 
     <bean id="CAS.LoginConfiguration"
           class="net.shibboleth.idp.cas.config.LoginConfiguration" />

Modified: trunk/idp-conf/src/main/resources/system/conf/saml-binding-config.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/conf/saml-binding-config.xml?rev=7672&r1=7671&r2=7672&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/conf/saml-binding-config.xml	(original)
+++ trunk/idp-conf/src/main/resources/system/conf/saml-binding-config.xml	Wed Aug 12 22:09:46 2015
@@ -67,6 +67,12 @@
             p:encoderBeanId="shibboleth.Encoders.SAML2SOAPEncoder" />
     </util:list>
 
+    <util:list id="shibboleth.OutgoingIDWSFSSOSBindings">
+        <!-- Special case, the binding is technically SOAP, but response endpoint checking based on PAOS. -->
+        <bean parent="shibboleth.BindingDescriptor" p:id="urn:oasis:names:tc:SAML:2.0:bindings:PAOS"
+            p:encoderBeanId="shibboleth.Encoders.IDWSFSOAPEncoder" />
+    </util:list>
+
     <!--
     These are the actual MessageEncoder beans that implement the outgoing binding requirements.

[... 36 lines stripped ...]