[java-identity-provider] 06/08: Enforce additional confirmation data on Assertion validation

[Brent Putman]

This is an automated email from the git hooks/post-receive script.

putmanb pushed a commit to branch master
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=e874a33bbae7160bfc739e5fea19252a8625b075

commit e874a33bbae7160bfc739e5fea19252a8625b075
Author: Brent Putman <putmanb at georgetown.edu>
AuthorDate: Wed Jan 29 21:12:33 2020 -0500

    Enforce additional confirmation data on Assertion validation
---
 idp-conf/src/main/resources/system/flows/authn/saml-authn-beans.xml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/idp-conf/src/main/resources/system/flows/authn/saml-authn-beans.xml b/idp-conf/src/main/resources/system/flows/authn/saml-authn-beans.xml
index 02e43f7..1f9cff2 100644
--- a/idp-conf/src/main/resources/system/flows/authn/saml-authn-beans.xml
+++ b/idp-conf/src/main/resources/system/flows/authn/saml-authn-beans.xml
@@ -347,6 +347,8 @@
             </bean>
         </property>
         <property name="inResponseToRequired" value="true" />
+        <property name="recipientRequired" value="true" />
+        <property name="notOnOrAfterRequired" value="true" />
     </bean>
 
     <bean id="ValidateAssertions" parent="NestedWebFlowProfileActionAdaptor" scope="prototype">

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.