[java-identity-provider] branch main updated: Toggle on enforcement of Assertion issuer Format in proxy flow.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=21053492e36c58fa80457ecbfaf933fbdd855da6

The following commit(s) were added to refs/heads/main by this push:
     new 21053492e Toggle on enforcement of Assertion issuer Format in proxy flow.
21053492e is described below

commit 21053492e36c58fa80457ecbfaf933fbdd855da6
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Fri Oct 4 15:48:28 2024 -0400

    Toggle on enforcement of Assertion issuer Format in proxy flow.
---
 .../main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml
index a6205c0fa..b0dd5da83 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml
@@ -381,6 +381,9 @@
     <bean id="AssertionValidationContextBuilder" class="org.opensaml.saml.saml2.profile.impl.DefaultAssertionValidationContextBuilder">
         <property name="clockSkew" value="%{idp.policy.clockSkew:PT3M}" />
         <property name="lifetime" value="%{idp.policy.assertionLifetime:PT3M}" />
+        <property name="requireEntityIssuer">
+            <ref bean="shibboleth.Conditions.TRUE" />
+        </property>
         <property name="checkAddress">
             <bean class="net.shibboleth.saml.saml2.profile.config.logic.CheckAddressPredicate" />
         </property>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.