Configuring C14N for NameID lookup

Rod Widdowson rdw at steadingsoftware.com
Tue Feb 11 07:16:08 EST 2014


I'd just like to point out these checkins:

> URL: http://svn.shibboleth.net/view/java-identity-provider?rev=5367&view=rev
> URL: http://svn.shibboleth.net/view/java-identity-provider?rev=5368&view=rev
> Log:
> IDP-359  Move the formats that are understood from the Canonicalization
> bean to the condition bean.  This allows some simplification in config as well
> as saves time in running dead end flows.

The impact of this change is

1) That C14N subflows which do not match format will now not be run (previous they were and returned "nope try again").
2) That we have an obvious place to add the choice of "which formats get which C14N", which is represent 99% of user configuration.

This feels quite natural to me, although we might want to move some of the bean definitions around (for instance putting the definition of SubjectC14NFlow/SAML2/Transient/Condition somewhere more obvious), but I'd just like to check that it fits into the general plan since moving the formats from the C14N bean did feel a little strange.







More information about the dev mailing list