[java-identity-provider] 04/08: Update ValidateAssertions wiring for SAML authn with invalidFatal=false

[Brent Putman]

This is an automated email from the git hooks/post-receive script.

putmanb pushed a commit to branch master
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=b856208d9db4836448ac4a4c0c5bdab065aa96f7

commit b856208d9db4836448ac4a4c0c5bdab065aa96f7
Author: Brent Putman <putmanb at georgetown.edu>
AuthorDate: Wed Jan 29 18:16:24 2020 -0500

    Update ValidateAssertions wiring for SAML authn with invalidFatal=false
---
 idp-conf/src/main/resources/system/flows/authn/saml-authn-beans.xml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/idp-conf/src/main/resources/system/flows/authn/saml-authn-beans.xml b/idp-conf/src/main/resources/system/flows/authn/saml-authn-beans.xml
index 3ff3e31..f538364 100644
--- a/idp-conf/src/main/resources/system/flows/authn/saml-authn-beans.xml
+++ b/idp-conf/src/main/resources/system/flows/authn/saml-authn-beans.xml
@@ -349,9 +349,8 @@
 
     <bean id="ValidateAssertions" parent="NestedWebFlowProfileActionAdaptor" scope="prototype">
         <constructor-arg>
-            <!-- TODO: should invalid be fatal, or let a later action decide what to do? -->
             <bean class="org.opensaml.saml.saml2.profile.impl.ValidateAssertions" scope="prototype"
-                  p:invalidFatal="true"
+                  p:invalidFatal="false"
                   p:httpServletRequest-ref="shibboleth.HttpServletRequest"
                   p:validationContextBuilder-ref="AssertionValidationContextBuilder"
                   p:assertionValidator-ref="AssertionValidator" />

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.