[java-plugin-shibd-saml] branch main updated: Add additional properties.

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-plugin-shibd-saml.

View the commit online:
https://codeberg.org/Shibboleth/java-plugin-shibd-saml/commit/bda3d5933f59b3b77f79fcbd1005fad9898c4e89

The following commit(s) were added to refs/heads/main by this push:
     new bda3d59  Add additional properties.
bda3d59 is described below

commit bda3d5933f59b3b77f79fcbd1005fad9898c4e89
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Thu Mar 26 15:57:35 2026 -0400

    Add additional properties.
---
 .../net/shibboleth/idp/module/conf/sp/saml.properties    | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/sp-saml-conf-impl/src/main/resources/net/shibboleth/idp/module/conf/sp/saml.properties b/sp-saml-conf-impl/src/main/resources/net/shibboleth/idp/module/conf/sp/saml.properties
index b07e5a5..04ea739 100644
--- a/sp-saml-conf-impl/src/main/resources/net/shibboleth/idp/module/conf/sp/saml.properties
+++ b/sp-saml-conf-impl/src/main/resources/net/shibboleth/idp/module/conf/sp/saml.properties
@@ -23,7 +23,21 @@ sp.saml.encryption.cert = %{idp.home}/credentials/sp/sp-encryption.crt
 #sp.saml.checkInResponseTo = true
 
 # Default security configuration for SAML
-#sp.saml.security.config = shibboleth.DefaultXMLSecurityConfiguration
+#sp.saml.security.config = shibboleth.sp.DefaultXMLSecurityConfiguration
+
+# To downgrade to SHA-1, set to shibboleth.sp.SigningConfiguration.SHA1
+#sp.saml.signing.config = shibboleth.sp.SigningConfiguration.SHA256
+
+# To upgrade to AES-GCM, set to shibboleth.sp.EncryptionConfiguration.GCM
+#sp.saml.encryption.config = shibboleth.sp.EncryptionConfiguration.CBC
+
+# Configures trust evaluation of keys used by services at runtime
+#sp.saml.trust.signatures = shibboleth.sp.ExplicitKeySignatureTrustEngine
+# Other options:
+#   shibboleth.sp.ChainingSignatureTrustEngine, shibboleth.sp.PKIXSignatureTrustEngine
+#sp.saml.trust.certificates = shibboleth.sp.ExplicitKeyX509TrustEngine
+# Other options:
+#   shibboleth.sp.ChainingX509TrustEngine, shibboleth.sp.PKIXX509TrustEngine
 
 # Set true to accept any decided attributes without a filtering rule
 #sp.saml.acceptUnfilteredAttributes = false

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.