IdP ProfileConfiguration element attribute default values
Scott Koranda
skoranda at gmail.com
Thu May 24 20:58:50 BST 2012
Hi,
After deploying the Shibboleth IdP version 2.3.6 the file
.../conf/relying-party.xml contains this text:
<!-- Each attribute in these profiles configuration is
set to its default value,
that is, the values that would be in
effect if those attributes were
not present.
... -->
The <ProfileConfiguration> element of type "SAML2ArtifactResolutionProfile"
looks like this in that file:
<rp:ProfileConfiguration xsi:type="saml:SAML2ArtifactResolutionProfile"
signResponses="never"
signAssertions="always"
encryptAssertions="conditional"
encryptNameIds="never" />
The page, however, at
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPXMLSigEnc
lists the following defaults:
signResponses - (default value: conditional)
signAssertions - (default value: never)
signRequests - (default value: conditional)
encryptAssertions - (default value: conditional)
encryptNameIds - (Default value: never)
Which are the defaults that will be used when the
ProfileConfiguration is thus:
<ProfileConfiguration xsi:type="saml:SAML2ArtifactResolutionProfile" />
?
Thanks,
Scott K
More information about the users
mailing list