[java-identity-provider COMMIT] /trunk/idp-conf/src/main/resources/system/flows/authn/authn-flow.xml
noreply at shibboleth.net
noreply at shibboleth.net
Tue Mar 22 10:51:32 EDT 2016
Author: scantor
Date: Tue Mar 22 10:51:31 2016
New Revision: 8171
URL: http://svn.shibboleth.net/view/java-identity-provider?rev=8171&view=rev
Log:
IDP-958 - Allow authn subflows to perform their own c14n.
https://issues.shibboleth.net/jira/browse/IDP-958
Fix wiring, was skipping identity switch check.
Modified:
trunk/idp-conf/src/main/resources/system/flows/authn/authn-flow.xml
Modified: trunk/idp-conf/src/main/resources/system/flows/authn/authn-flow.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/flows/authn/authn-flow.xml?rev=8171&r1=8170&r2=8171&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/flows/authn/authn-flow.xml (original)
+++ trunk/idp-conf/src/main/resources/system/flows/authn/authn-flow.xml Tue Mar 22 10:51:31 2016
@@ -77,7 +77,7 @@
<decision-state id="CheckSubjectCanonicalization">
<if test="opensamlProfileRequestContext.getSubcontext(T(net.shibboleth.idp.authn.context.SubjectCanonicalizationContext)).getPrincipalName() == null"
then="CallSubjectCanonicalization"
- else="FinalizeAuthentication" />
+ else="DetectIdentitySwitch" />
</decision-state>
<!-- This runs a c14n step on the result of the authentication. -->
More information about the commits
mailing list