[java-identity-provider COMMIT] /trunk/idp-conf/src/main/resources/system/flows/authn/authn-flow.xml

noreply at shibboleth.net noreply at shibboleth.net
Tue Mar 22 10:51:32 EDT 2016


Author: scantor
Date: Tue Mar 22 10:51:31 2016
New Revision: 8171

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=8171&view=rev
Log:
IDP-958 - Allow authn subflows to perform their own c14n.

https://issues.shibboleth.net/jira/browse/IDP-958

Fix wiring, was skipping identity switch check.

Modified:
    trunk/idp-conf/src/main/resources/system/flows/authn/authn-flow.xml

Modified: trunk/idp-conf/src/main/resources/system/flows/authn/authn-flow.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/flows/authn/authn-flow.xml?rev=8171&r1=8170&r2=8171&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/flows/authn/authn-flow.xml	(original)
+++ trunk/idp-conf/src/main/resources/system/flows/authn/authn-flow.xml	Tue Mar 22 10:51:31 2016
@@ -77,7 +77,7 @@
     <decision-state id="CheckSubjectCanonicalization">
         <if test="opensamlProfileRequestContext.getSubcontext(T(net.shibboleth.idp.authn.context.SubjectCanonicalizationContext)).getPrincipalName() == null"
             then="CallSubjectCanonicalization"
-            else="FinalizeAuthentication" />
+            else="DetectIdentitySwitch" />
     </decision-state>
 
     <!-- This runs a c14n step on the result of the authentication. -->



More information about the commits mailing list