encryptAssertions

[It Meme]

Hi List:

W.r.t to following snippet from the 'relying-party.xml' configuration file;
the setting for encryptAssertions is 'conditional' - would changing this to
'never' be a global value that will over-ride all the individual SP
settings? Thanks.



<rp:ProfileConfiguration xsi:type="saml:SAML2AttributeQueryProfile"

                              assertionLifetime="PT5M"

                              assertionProxyCount="0"

                              signResponses="conditional"

                              signAssertions="never"

                              encryptAssertions="conditional"

                              encryptNameIds="never" />
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130514/2adc7806/attachment.html