Defaults for encryption and signing predicates in SAML profiles

Rod Widdowson rdw at steadingsoftware.com
Wed Apr 30 03:42:23 EDT 2014


> I think what we wanted to try and do, though, was make sure that instead
> of the defaults being in the parsers, that we set them inside the profile
> configuration objects themselves by installing the right predicates in
> each case to match the current defaults.

Right, me too.

Demonstrably we don't have the correct defaults right now.  It seems as
though I have an action to establish what the current V2 defaults are, what
the current V3 defaults are then we (you) can review and I can make the
changes on the profile objects.  I've entered IDP-402 to remind me about
this since I don't have any spare interrupt stack right now.
 
> What bugged me about V2 is that you had to look at the Spring parser to
> find out the default for an object in practice, instead of just looking at
> the object itself.

+1




More information about the dev mailing list