[java-identity-provider COMMIT] in /trunk/idp-conf/src/main/resources: conf/saml-nameid.properties system/conf/saml-n...
noreply at shibboleth.net
noreply at shibboleth.net
Sun May 24 15:50:59 EDT 2015
Author: scantor
Date: Sun May 24 15:50:59 2015
New Revision: 7533
URL: http://svn.shibboleth.net/view/java-identity-provider?rev=7533&view=rev
Log:
IDP-729 - Add a property for turning off use of unfiltered attributes in persistent ID generator
Modified:
trunk/idp-conf/src/main/resources/conf/saml-nameid.properties
trunk/idp-conf/src/main/resources/system/conf/saml-nameid-system.xml
Modified: trunk/idp-conf/src/main/resources/conf/saml-nameid.properties
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/conf/saml-nameid.properties?rev=7533&r1=7532&r2=7533&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/conf/saml-nameid.properties (original)
+++ trunk/idp-conf/src/main/resources/conf/saml-nameid.properties Sun May 24 15:50:59 2015
@@ -13,6 +13,7 @@
# Otherwise for computed PersistentIDs set the source attribute and salt.
#idp.persistentId.sourceAttribute = changethistosomethingreal
+#idp.persistentId.useUnfilteredAttributes = true
# Do *NOT* share the salt with other people, it's like divulging your private key.
#idp.persistentId.salt = changethistosomethingrandom
#idp.persistentId.algorithm = SHA
Modified: trunk/idp-conf/src/main/resources/system/conf/saml-nameid-system.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/conf/saml-nameid-system.xml?rev=7533&r1=7532&r2=7533&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/conf/saml-nameid-system.xml (original)
+++ trunk/idp-conf/src/main/resources/system/conf/saml-nameid-system.xml Sun May 24 15:50:59 2015
@@ -27,6 +27,7 @@
<bean id="shibboleth.SAML2PersistentGenerator" lazy-init="true"
class="net.shibboleth.idp.saml.nameid.impl.PersistentSAML2NameIDGenerator"
+ p:useUnfilteredAttributes="%{idp.persistentId.useUnfilteredAttributes:true}"
p:persistentIdGenerator-ref="%{idp.persistentId.generator:shibboleth.ComputedPersistentIdGenerator}">
<property name="attributeSourceIds">
<bean parent="shibboleth.CommaDelimStringArray" c:_0="%{idp.persistentId.sourceAttribute:}" />
More information about the commits
mailing list