SP issue: Shib-Identity-Provider not set for some IdPs

Sara Hopkins sara.hopkins at ed.ac.uk
Thu Apr 5 19:47:37 BST 2012


Hi again Scott,

On 31/03/2012 18:21, Cantor, Scott wrote:
>> Until or in 2.1 there was a bug where Shib-Identity-Provider
>> sometimes was not set. I can't recall the specifics but either way
>> they shouldn't be running 2.1 anyway.
>
> Yes, I believe it related to encryption and signing in a particular
> combination. The security wasn't compromised, but the information being
> pulled from the response wasn't handled properly.

Would you be able to point me at the documentation for that bug, please? 
I would be interested to read up on the details to see if it fits the 
problem I'm trying to help with. I've been through the lists of bugs 
fixed in 2.1 and 2.2 but I can't see it.

(It turns out my client has 2.0. I am of course doing my best to 
encourage them to upgrade)

Thanks,

Sara
-- 
Sara Hopkins
Support Team
UK Access Management Federation for Education and Research
web:    http://www.ukfederation.org.uk/

The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.


More information about the users mailing list