IdP ProfileConfiguration element attribute default values

Scott Koranda skoranda at gmail.com
Thu May 24 20:58:50 BST 2012


Hi,

After deploying the Shibboleth IdP version 2.3.6 the file
.../conf/relying-party.xml contains this text:

<!-- Each attribute in these profiles configuration is
     set to its default value,
     that is, the values that would be in
     effect if those attributes were
     not present.

    ... -->

The <ProfileConfiguration> element of type "SAML2ArtifactResolutionProfile"
looks like this in that file:

 <rp:ProfileConfiguration xsi:type="saml:SAML2ArtifactResolutionProfile" 
    signResponses="never"
    signAssertions="always" 
    encryptAssertions="conditional"
    encryptNameIds="never" />

The page, however, at

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPXMLSigEnc

lists the following defaults:

signResponses - (default value: conditional)
signAssertions - (default value: never)
signRequests - (default value: conditional)

encryptAssertions - (default value: conditional)
encryptNameIds - (Default value: never)

Which are the defaults that will be used when the
ProfileConfiguration is thus:

<ProfileConfiguration xsi:type="saml:SAML2ArtifactResolutionProfile" />

?

Thanks,

Scott K



More information about the users mailing list