[JIRA] (IDP-2016) Upgrading to 4.1 or later breaks Extended flow

[Takeshi Nishimura (Jira)]

Takeshi Nishimura ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=5d11c773965f500bce57d7b3 ) *commented* on IDP-2016 ( https://shibboleth.atlassian.net/browse/IDP-2016?atlOrigin=eyJpIjoiMDY2OGZkZTMyYzFhNDBhMWJlN2RmMmZhMWQ0NGY3ZTQiLCJwIjoiaiJ9 )

Re: Upgrading to 4.1 or later breaks Extended flow ( https://shibboleth.atlassian.net/browse/IDP-2016?atlOrigin=eyJpIjoiMDY2OGZkZTMyYzFhNDBhMWJlN2RmMmZhMWQ0NGY3ZTQiLCJwIjoiaiJ9 )

Yes, I know. We are preparing for a transition to MFA flow, but currently we are using Extended flow.

addDefaultPrincipals was calculated like this in 4.0.1. It formerly seemed to take PrincipalOverride into account.

shibboleth-identity-provider-4.0.1/system/flows/authn/password-authn-beans.xml:

       p:addDefaultPrincipals="#{getObject( 'shibboleth.authn.Password.addDefaultPrincipals' ) ?:
           (getObject( 'shibboleth.authn.Password.PrincipalOverride' ) == null
               or getObject( 'shibboleth.authn.Password.PrincipalOverride' ).isEmpty())}"

( https://shibboleth.atlassian.net/browse/IDP-2016#add-comment?atlOrigin=eyJpIjoiMDY2OGZkZTMyYzFhNDBhMWJlN2RmMmZhMWQ0NGY3ZTQiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-2016#add-comment?atlOrigin=eyJpIjoiMDY2OGZkZTMyYzFhNDBhMWJlN2RmMmZhMWQ0NGY3ZTQiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100207- sha1:bddf6e1 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20221004/61fd2fdb/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-4ff290cd-2d6b-4f29-b442-f0965eaee76c
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221004/61fd2fdb/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-a8b2737a-ae7e-4fe2-bfe0-b898b9ca3533
Type: image/png
Size: 425 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221004/61fd2fdb/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-1ef9bc07-f15c-40c9-b9b5-766b82a7406c
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221004/61fd2fdb/attachment-0005.png>