[java-identity-provider] 10/12: IDP-2274: Unable to decrypt the Assertion when changing issuer ...

Rod Widdowson rdw at steadingsoftware.com
Tue Apr 9 12:29:03 UTC 2024


This is an automated email from the git hooks/post-receive script.

rdw pushed a commit to branch dev/IDP-2147
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=519643f9f45e4752f78271e07dbef3212b056c8b

commit 519643f9f45e4752f78271e07dbef3212b056c8b
Author: Brent Putman <putmanb at georgetown.edu>
AuthorDate: Wed Apr 3 15:53:12 2024 -0400

    IDP-2274: Unable to decrypt the Assertion when changing issuer ...
    
    Unable to decrypt the Assertion when changing issuer for the AuthnRequest
    to the upstream IdP via RelyingPartyConfigurationon.
    
    Add missing recipient lookup strategy to SAML authN flow bean.
    
    Also replace some literal tab chars that were screwing up the formatting.
---
 .../resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml  | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml
index 10677f3c3..4d288d003 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml
@@ -333,9 +333,10 @@
 
     <bean id="PopulateDecryptionParameters" parent="NestedWebFlowProfileActionAdaptor" scope="prototype">
         <constructor-arg>
-		    <bean class="org.opensaml.profile.action.impl.PopulateDecryptionParameters"
-		        p:configurationLookupStrategy-ref="shibboleth.DecryptionConfigurationLookup"
-		        p:decryptionParametersResolver-ref="shibboleth.DecryptionParametersResolver" />
+            <bean class="org.opensaml.profile.action.impl.PopulateDecryptionParameters"
+                p:recipientLookupStrategy-ref="shibboleth.IssuerLookup.Simple"
+                p:configurationLookupStrategy-ref="shibboleth.DecryptionConfigurationLookup"
+                p:decryptionParametersResolver-ref="shibboleth.DecryptionParametersResolver" />
         </constructor-arg>
     </bean>
     

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list