[java-identity-provider] 03/04: SWF config and bean wiring for inbound SAML 2 SLO over artifact binding

Brent Putman putmanb at georgetown.edu
Wed Sep 26 23:33:17 EDT 2018


This is an automated email from the git hooks/post-receive script.

putmanb pushed a commit to branch master
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=dfb575d48af58e80247a34cd8a5af89a8b7dafee

commit dfb575d48af58e80247a34cd8a5af89a8b7dafee
Author: Brent Putman <putmanb at georgetown.edu>
AuthorDate: Wed Sep 26 22:20:20 2018 -0400

    SWF config and bean wiring for inbound SAML 2 SLO over artifact binding
---
 .../main/resources/system/conf/webflow-config.xml  |  1 +
 .../system/flows/saml/saml2/slo-artifact-beans.xml | 34 ++++++++++++++++++++++
 .../system/flows/saml/saml2/slo-artifact-flow.xml  |  8 +++++
 3 files changed, 43 insertions(+)

diff --git a/idp-conf/src/main/resources/system/conf/webflow-config.xml b/idp-conf/src/main/resources/system/conf/webflow-config.xml
index 3dc6165..261fc99 100644
--- a/idp-conf/src/main/resources/system/conf/webflow-config.xml
+++ b/idp-conf/src/main/resources/system/conf/webflow-config.xml
@@ -61,6 +61,7 @@
                 <entry key="SAML2/POST/SLO" value="../system/flows/saml/saml2/slo-post-flow.xml" />
                 <entry key="SAML2/POST-SimpleSign/SLO" value="../system/flows/saml/saml2/slo-post-flow.xml" />
                 <entry key="SAML2/Redirect/SLO" value="../system/flows/saml/saml2/slo-redirect-flow.xml" />
+                <entry key="SAML2/Artifact/SLO" value="../system/flows/saml/saml2/slo-artifact-flow.xml" />
                 <entry key="SAML2/SOAP/SLO" value="../system/flows/saml/saml2/slo-back-flow.xml" />
                 <entry key="SAML2/SOAP/AttributeQuery" value="../system/flows/saml/saml2/attribute-query-flow.xml" />
                 <entry key="SAML2/SOAP/ArtifactResolution" value="../system/flows/saml/saml2/artifact-resolution-flow.xml" />
diff --git a/idp-conf/src/main/resources/system/flows/saml/saml2/slo-artifact-beans.xml b/idp-conf/src/main/resources/system/flows/saml/saml2/slo-artifact-beans.xml
new file mode 100644
index 0000000..bf9a111
--- /dev/null
+++ b/idp-conf/src/main/resources/system/flows/saml/saml2/slo-artifact-beans.xml
@@ -0,0 +1,34 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<beans xmlns="http://www.springframework.org/schema/beans"
+       xmlns:c="http://www.springframework.org/schema/c"
+       xmlns:context="http://www.springframework.org/schema/context"
+       xmlns:p="http://www.springframework.org/schema/p"
+       xmlns:util="http://www.springframework.org/schema/util"
+       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
+                           http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context.xsd
+                           http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util.xsd"
+       default-init-method="initialize"
+       default-destroy-method="destroy">
+
+    <import resource="slo-front-abstract-beans.xml" />
+
+    <bean id="DecodeMessage" class="org.opensaml.profile.action.impl.DecodeMessage" scope="prototype">
+        <constructor-arg>
+            <bean class="org.opensaml.saml.saml2.binding.decoding.impl.HTTPArtifactDecoder" scope="prototype"
+                p:parserPool-ref="shibboleth.ParserPool"
+                p:httpServletRequest-ref="shibboleth.HttpServletRequest"
+                p:bindingDescriptor-ref="shibboleth.Binding.SAML2Artifact"
+                p:peerEntityRole="#{T(org.opensaml.saml.saml2.metadata.SPSSODescriptor).DEFAULT_ELEMENT_NAME}"
+                p:roleDescriptorResolver-ref="shibboleth.RoleDescriptorResolver"
+                p:identifierGenerationStrategy-ref="shibboleth.DefaultIdentifierGenerationStrategy"
+                p:selfEntityIDResolver-ref="ArtifactSupport.SelfEntityIDResolver"
+                p:artifactEndpointResolver-ref="shibboleth.EndpointResolver"
+                p:SOAPClient-ref="shibboleth.SOAPClient.SAML"
+                p:SOAPPipelineName="SAML2.ArtifactDecoder"
+                p:SOAPClientSecurityConfigurationProfileId="#{T(net.shibboleth.idp.saml.saml2.profile.config.SingleLogoutProfileConfiguration).PROFILE_ID}"
+                />
+        </constructor-arg>
+    </bean>
+    
+</beans>
\ No newline at end of file
diff --git a/idp-conf/src/main/resources/system/flows/saml/saml2/slo-artifact-flow.xml b/idp-conf/src/main/resources/system/flows/saml/saml2/slo-artifact-flow.xml
new file mode 100644
index 0000000..8e8de10
--- /dev/null
+++ b/idp-conf/src/main/resources/system/flows/saml/saml2/slo-artifact-flow.xml
@@ -0,0 +1,8 @@
+<flow xmlns="http://www.springframework.org/schema/webflow"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="http://www.springframework.org/schema/webflow http://www.springframework.org/schema/webflow/spring-webflow.xsd"
+      parent="saml2.slo.front.abstract">
+
+    <bean-import resource="slo-artifact-beans.xml" />
+
+</flow>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list