[java-identity-provider COMMIT] /trunk/idp-conf/src/main/resources/system/flows/saml/saml2/idwsf-ssos-security-beans.xml

[noreply at shibboleth.net]

Author: putmanb
Date: Fri Aug 21 21:11:19 2015
New Revision: 7700

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=7700&view=rev
Log:
Add missing delegation restriction condition validator to delegation Assertion validator.

Modified:
    trunk/idp-conf/src/main/resources/system/flows/saml/saml2/idwsf-ssos-security-beans.xml

Modified: trunk/idp-conf/src/main/resources/system/flows/saml/saml2/idwsf-ssos-security-beans.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/flows/saml/saml2/idwsf-ssos-security-beans.xml?rev=7700&r1=7699&r2=7700&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/flows/saml/saml2/idwsf-ssos-security-beans.xml	(original)
+++ trunk/idp-conf/src/main/resources/system/flows/saml/saml2/idwsf-ssos-security-beans.xml	Fri Aug 21 21:11:19 2015
@@ -167,6 +167,7 @@
         <constructor-arg index="0">
             <util:list>
                 <bean class="org.opensaml.saml.saml2.assertion.impl.AudienceRestrictionConditionValidator" />
+                <bean class="org.opensaml.saml.saml2.assertion.impl.DelegationRestrictionConditionValidator" />
                 <bean class="org.opensaml.saml.saml2.assertion.impl.OneTimeUseConditionValidator">
                     <constructor-arg ref="shibboleth.ReplayCache" />
                     <constructor-arg value="#{null}" />