[java-identity-provider] branch main updated: IDP-2127 - Deprecate SAML 1.1 flows as at-risk

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=290f057343e38f7f8c57aa4abf48ee6de5ef1e0d

The following commit(s) were added to refs/heads/main by this push:
     new 290f05734 IDP-2127 - Deprecate SAML 1.1 flows as at-risk
290f05734 is described below

commit 290f057343e38f7f8c57aa4abf48ee6de5ef1e0d
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Tue Jun 13 09:36:47 2023 -0400

    IDP-2127 - Deprecate SAML 1.1 flows as at-risk
    
    https://shibboleth.atlassian.net/browse/IDP-2127
---
 .../net/shibboleth/idp/flows/saml/saml1/artifact-resolution-flow.xml     | 1 +
 .../net/shibboleth/idp/flows/saml/saml1/attribute-query-flow.xml         | 1 +
 .../resources/net/shibboleth/idp/flows/saml/saml1/sso-abstract-flow.xml  | 1 +
 3 files changed, 3 insertions(+)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/saml/saml1/artifact-resolution-flow.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/saml/saml1/artifact-resolution-flow.xml
index 1b9f30f6d..fd78e74c1 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/saml/saml1/artifact-resolution-flow.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/saml/saml1/artifact-resolution-flow.xml
@@ -8,6 +8,7 @@
     <action-state id="InitializeProfileRequestContext">
         <on-entry>
             <set name="flowScope.inboundSecuritySubflow" value="'intercept/security-policy/saml-soap'" />
+            <evaluate expression="T(net.shibboleth.shared.primitive.DeprecationSupport).atRiskOnce(T(net.shibboleth.shared.primitive.DeprecationSupport.ObjectType).WEBFLOW, 'SAML 1.1 Artifact Resolution', null)" />
         </on-entry>
         <evaluate expression="InitializeProfileRequestContext" />
         <evaluate expression="FlowStartPopulateAuditContext" />
diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/saml/saml1/attribute-query-flow.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/saml/saml1/attribute-query-flow.xml
index 451bd1899..e8ebfb9a5 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/saml/saml1/attribute-query-flow.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/saml/saml1/attribute-query-flow.xml
@@ -8,6 +8,7 @@
     <action-state id="InitializeProfileRequestContext">
         <on-entry>
             <set name="flowScope.inboundSecuritySubflow" value="'intercept/security-policy/saml-soap'" />
+            <evaluate expression="T(net.shibboleth.shared.primitive.DeprecationSupport).atRiskOnce(T(net.shibboleth.shared.primitive.DeprecationSupport.ObjectType).WEBFLOW, 'SAML 1.1 Attribute Query', null)" />
         </on-entry>
         <evaluate expression="InitializeProfileRequestContext" />
         <evaluate expression="FlowStartPopulateAuditContext" />
diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/saml/saml1/sso-abstract-flow.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/saml/saml1/sso-abstract-flow.xml
index 1c429029f..6b15c298b 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/saml/saml1/sso-abstract-flow.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/saml/saml1/sso-abstract-flow.xml
@@ -8,6 +8,7 @@
     <action-state id="InitializeProfileRequestContext">
         <on-entry>
             <set name="flowScope.inboundSecuritySubflow" value="'intercept/security-policy/shibboleth-sso'" />
+            <evaluate expression="T(net.shibboleth.shared.primitive.DeprecationSupport).atRiskOnce(T(net.shibboleth.shared.primitive.DeprecationSupport.ObjectType).WEBFLOW, 'SAML 1.1 SSO', null)" />
         </on-entry>
         <evaluate expression="InitializeProfileRequestContext" />
         <evaluate expression="FlowStartPopulateAuditContext" />

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.