OpenSAML 3.2.0 not generating proper signatures

[Brent Putman]

On 1/3/17 5:03 PM, Marc Boorshtein wrote:
>
>  I see you have velocity templates in there.   Are they easily
> customizable?

Yes, pretty easily. The default ones are in opensaml-saml-impl, under
the "/templates" resources path.  You could copy those elsewhere and
modify them.  There's plenty of inline docs in the templates on the
supported context attributes.  Then you would use by either 1) setting a
different template ID on the encoder (i.e. point to a different
classpath resource name, from your own jar) or 2) set up the injected
VelocityEngine to look at say an external filesystem path (outside of a
jar) in preference to, or instead of, a classpath resource; this would
just be standard Velocity stuff, see their docs.

We support #2  by out of the box in the v3 IdP.  Take a look at how we
set up the VelocityEngine bean in
/idp-conf/src/main/resources/system/conf/global-system.xml.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20170103/61dec9f7/attachment.html>