[java-identity-provider COMMIT] /trunk/idp-conf/src/main/resources/system/flows/saml/saml2/sso-abstract-flow.xml

[noreply at shibboleth.net]

Author: scantor
Date: Wed Feb 10 20:26:21 2016
New Revision: 8090

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=8090&view=rev
Log:
IDP-920 - Secondary session index update fails when a fixed NameID is used

https://issues.shibboleth.net/jira/browse/IDP-920

Correct a flaw in the SAML 2 SSO flow if the session update fails.

Modified:
    trunk/idp-conf/src/main/resources/system/flows/saml/saml2/sso-abstract-flow.xml

Modified: trunk/idp-conf/src/main/resources/system/flows/saml/saml2/sso-abstract-flow.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/flows/saml/saml2/sso-abstract-flow.xml?rev=8090&r1=8089&r2=8090&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/flows/saml/saml2/sso-abstract-flow.xml	(original)
+++ trunk/idp-conf/src/main/resources/system/flows/saml/saml2/sso-abstract-flow.xml	Wed Feb 10 20:26:21 2016
@@ -112,6 +112,14 @@
         <evaluate expression="PostAssertionPopulateAuditContext" />
         <evaluate expression="UpdateSessionWithSPSession" />
 
+        <evaluate expression="'proceed'" />
+        
+        <transition on="proceed" to="EncryptAndSign" />
+        <!-- Mask storage failure. -->
+        <transition on="InputOutputError" to="EncryptAndSign" />
+    </action-state>
+
+    <action-state id="EncryptAndSign">
         <evaluate expression="EncryptNameIDs" />
         <evaluate expression="EncryptAttributes" />
         <evaluate expression="SignAssertions" />
@@ -122,8 +130,6 @@
         <evaluate expression="'proceed'" />
         
         <transition on="proceed" to="PopulateClientStorageSaveContext" />
-        <!-- Mask storage failure. -->
-        <transition on="InputOutputError" to="PopulateClientStorageSaveContext" />
     </action-state>
     
     <!-- We may need to save client storage. -->