[java-identity-provider COMMIT] /trunk/idp-conf/src/main/resources/system/flows/saml/saml2/common-beans.xml

[noreply at shibboleth.net]

Author: putmanb
Date: Fri Oct 23 17:10:55 2015
New Revision: 7864

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=7864&view=rev
Log:
IDP-671: Create Action(s) and supporting code to issue SAML 2 Assertions decorated for delegation

Add Spring wiring for self-encryption of NameIDs when issuing a delegated Assertion.

Modified:
    trunk/idp-conf/src/main/resources/system/flows/saml/saml2/common-beans.xml

Modified: trunk/idp-conf/src/main/resources/system/flows/saml/saml2/common-beans.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/flows/saml/saml2/common-beans.xml?rev=7864&r1=7863&r2=7864&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/flows/saml/saml2/common-beans.xml	(original)
+++ trunk/idp-conf/src/main/resources/system/flows/saml/saml2/common-beans.xml	Fri Oct 23 17:10:55 2015
@@ -110,10 +110,21 @@
             </list>
         </property>
     </bean>
+    
+    <bean id="EncryptToSelfParametersStrategy" class="org.opensaml.saml.security.impl.InlineSelfEncryptionParametersStrategy">
+        <constructor-arg>
+            <bean class="net.shibboleth.idp.relyingparty.impl.EncryptionCredentialsResolver" 
+                c:_0-ref="shibboleth.RelyingPartyResolverService" />
+        </constructor-arg>
+        <constructor-arg ref="shibboleth.EncryptionParametersResolver" />
+    </bean>
 
     <bean id="EncryptNameIDs"
             class="org.opensaml.saml.saml2.profile.impl.EncryptNameIDs" scope="prototype"
-            p:recipientLookupStrategy-ref="shibboleth.RelyingPartyIdLookup.Simple">
+            p:recipientLookupStrategy-ref="shibboleth.RelyingPartyIdLookup.Simple"
+            p:encryptToSelf-ref="shibboleth.Conditions.IssuingDelegatedAssertion"
+            p:encryptToSelfParametersStrategy-ref="EncryptToSelfParametersStrategy"
+            p:selfRecipientLookupStrategy-ref="shibboleth.ResponderIdLookup.Simple" >
         <property name="encryptionContextLookupStrategy">
             <bean class="com.google.common.base.Functions" factory-method="compose"
                 c:g-ref="shibboleth.ChildLookup.EncryptionParameters"