[java-identity-provider] 08/08: Add wiring for checking inbound Response Issuer

[Brent Putman]

This is an automated email from the git hooks/post-receive script.

putmanb pushed a commit to branch master
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=4181b72f7a56876c6a6f79f458d87150ca0c7c0c

commit 4181b72f7a56876c6a6f79f458d87150ca0c7c0c
Author: Brent Putman <putmanb at georgetown.edu>
AuthorDate: Thu Jan 30 02:15:55 2020 -0500

    Add wiring for checking inbound Response Issuer
---
 .../src/main/resources/system/flows/authn/saml-authn-beans.xml | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/idp-conf/src/main/resources/system/flows/authn/saml-authn-beans.xml b/idp-conf/src/main/resources/system/flows/authn/saml-authn-beans.xml
index 690c8bd..ca48520 100644
--- a/idp-conf/src/main/resources/system/flows/authn/saml-authn-beans.xml
+++ b/idp-conf/src/main/resources/system/flows/authn/saml-authn-beans.xml
@@ -270,7 +270,15 @@
                             p:keyInfoResolver-ref="shibboleth.KeyInfoCredentialResolver" />
                         <bean class="org.opensaml.messaging.handler.impl.CheckMandatoryIssuer" scope="prototype">
                             <property name="issuerLookupStrategy">
-                                <bean class="org.opensaml.saml.common.messaging.context.navigate.SAMLMessageContextIssuerFunction" />
+                                <bean class="org.opensaml.saml.common.binding.security.impl.MessageContextEntityIDLookup" p:direction="INBOUND" />
+                            </property>
+                        </bean>
+                        <bean class="org.opensaml.messaging.handler.impl.CheckExpectedIssuer" scope="prototype">
+                            <property name="issuerLookupStrategy">
+                                <bean class="org.opensaml.saml.common.binding.security.impl.MessageContextEntityIDLookup" p:direction="INBOUND" />
+                            </property>
+                            <property name="expectedIssuerLookupStrategy">
+                                <bean class="org.opensaml.saml.common.binding.security.impl.MessageContextEntityIDLookup" p:direction="OUTBOUND" />
                             </property>
                         </bean>
                     </list>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.