[java-identity-provider] 05/08: Wiring for message and Assertion InResponseTo validation

Brent Putman putmanb at georgetown.edu
Thu Jan 30 02:17:39 EST 2020


This is an automated email from the git hooks/post-receive script.

putmanb pushed a commit to branch master
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=64e366e5298a72dd6ba7f6ba5daa55729e348597

commit 64e366e5298a72dd6ba7f6ba5daa55729e348597
Author: Brent Putman <putmanb at georgetown.edu>
AuthorDate: Wed Jan 29 19:55:34 2020 -0500

    Wiring for message and Assertion InResponseTo validation
---
 idp-conf/src/main/resources/system/flows/authn/saml-authn-beans.xml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/idp-conf/src/main/resources/system/flows/authn/saml-authn-beans.xml b/idp-conf/src/main/resources/system/flows/authn/saml-authn-beans.xml
index f538364..02e43f7 100644
--- a/idp-conf/src/main/resources/system/flows/authn/saml-authn-beans.xml
+++ b/idp-conf/src/main/resources/system/flows/authn/saml-authn-beans.xml
@@ -245,6 +245,7 @@
                     <list>
                         <bean class="org.opensaml.saml.common.binding.impl.CheckMessageVersionHandler" scope="prototype"
                             p:ignoreMissingOrUnrecognized="true" />
+                        <bean class="org.opensaml.saml.common.binding.security.impl.InResponseToSecurityHandler" scope="prototype" />
                         <bean class="org.opensaml.saml.common.binding.impl.SAMLProtocolAndRoleHandler" scope="prototype"
                             p:protocol-ref="shibboleth.MetadataLookup.Protocol"
                             p:role-ref="shibboleth.MetadataLookup.Role" />
@@ -345,6 +346,7 @@
                 </constructor-arg>
             </bean>
         </property>
+        <property name="inResponseToRequired" value="true" />
     </bean>
 
     <bean id="ValidateAssertions" parent="NestedWebFlowProfileActionAdaptor" scope="prototype">

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list