[java-identity-provider] 10/12: IDP-2274: Unable to decrypt the Assertion when changing issuer ...
Rod Widdowson
rdw at steadingsoftware.com
Tue Apr 9 12:29:03 UTC 2024
This is an automated email from the git hooks/post-receive script.
rdw pushed a commit to branch dev/IDP-2147
in repository java-identity-provider.
View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=519643f9f45e4752f78271e07dbef3212b056c8b
commit 519643f9f45e4752f78271e07dbef3212b056c8b
Author: Brent Putman <putmanb at georgetown.edu>
AuthorDate: Wed Apr 3 15:53:12 2024 -0400
IDP-2274: Unable to decrypt the Assertion when changing issuer ...
Unable to decrypt the Assertion when changing issuer for the AuthnRequest
to the upstream IdP via RelyingPartyConfigurationon.
Add missing recipient lookup strategy to SAML authN flow bean.
Also replace some literal tab chars that were screwing up the formatting.
---
.../resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml | 7 ++++---
1 file changed, 4 insertions(+), 3 deletions(-)
diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml
index 10677f3c3..4d288d003 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml
@@ -333,9 +333,10 @@
<bean id="PopulateDecryptionParameters" parent="NestedWebFlowProfileActionAdaptor" scope="prototype">
<constructor-arg>
- <bean class="org.opensaml.profile.action.impl.PopulateDecryptionParameters"
- p:configurationLookupStrategy-ref="shibboleth.DecryptionConfigurationLookup"
- p:decryptionParametersResolver-ref="shibboleth.DecryptionParametersResolver" />
+ <bean class="org.opensaml.profile.action.impl.PopulateDecryptionParameters"
+ p:recipientLookupStrategy-ref="shibboleth.IssuerLookup.Simple"
+ p:configurationLookupStrategy-ref="shibboleth.DecryptionConfigurationLookup"
+ p:decryptionParametersResolver-ref="shibboleth.DecryptionParametersResolver" />
</constructor-arg>
</bean>
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list