[java-identity-provider COMMIT] /trunk/idp-conf/src/main/resources/system/flows/saml/saml2/idwsf-ssos-flow.xml

[noreply at shibboleth.net]

Author: putmanb
Date: Tue Oct 18 20:59:05 2016
New Revision: 8513

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=8513&view=rev
Log:
IDP-1068: Delegation Liberty SSOS flow completely broken on Subject C14N

Modified:
    trunk/idp-conf/src/main/resources/system/flows/saml/saml2/idwsf-ssos-flow.xml

Modified: trunk/idp-conf/src/main/resources/system/flows/saml/saml2/idwsf-ssos-flow.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/flows/saml/saml2/idwsf-ssos-flow.xml?rev=8513&r1=8512&r2=8513&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/flows/saml/saml2/idwsf-ssos-flow.xml	(original)
+++ trunk/idp-conf/src/main/resources/system/flows/saml/saml2/idwsf-ssos-flow.xml	Tue Oct 18 20:59:05 2016
@@ -61,13 +61,14 @@
         <evaluate expression="EvaluateDelegationPolicy" />
         <evaluate expression="DecryptDelegatedAssertionNameID" />
         <evaluate expression="ProcessDelegatedAssertion" />
+        <evaluate expression="PopulateSubjectCanonicalizationContext" />
         
         <evaluate expression="'proceed'" />
         
         <transition on="proceed" to="CallSAMLSubjectCanonicalization" />
     </action-state>
     
-    <subflow-state id="CallSAMLSubjectCanonicalization" subflow="c14n/saml">
+    <subflow-state id="CallSAMLSubjectCanonicalization" subflow="c14n">
         <input name="calledAsSubflow" value="true" />
         <transition on="proceed" to="FinalizeSAMLTokenProcessing" />
     </subflow-state>