skipEndpointValidationWhenSigned is no more honored after IdP 3 upgrade
Youssef Ghorbal
youssef.ghorbal at pasteur.fr
Sat Jul 18 07:58:22 EDT 2015
Hello,
I’ve upgraded an IdP to the latest 3 track. I’ve followed the recommendation to move to the new relaying-party.xml conf style.
In the v2 configuration we’ve activated the skipEndpointValidationWhenSigned so that we don’t need Binding definition in the metadata.
After the upgrade we’ve added the property to the SAML2.SSO bean so it looks like :
<bean id="shibboleth.DefaultRelyingParty" parent="RelyingParty">
<property name="profileConfigurations">
<list>
<bean parent="Shibboleth.SSO" p:postAuthenticationFlows="attribute-release" />
<ref bean="SAML1.AttributeQuery" />
<ref bean="SAML1.ArtifactResolution" />
<bean parent="SAML2.SSO" p:postAuthenticationFlows="attribute-release" p:skipEndpointValidationWhenSigned="true"/>
<ref bean="SAML2.ECP" />
<ref bean="SAML2.Logout" />
<ref bean="SAML2.AttributeQuery" />
<ref bean="SAML2.ArtifactResolution" />
</list>
</property>
</bean>
But this does not seem to work, the IdP rises an error at the SSO initialiazation :
2015-07-18 13:54:59,745 - WARN [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:402] - Profile Action PopulateBindingAndEndpointContexts: Unable to resolve outbound message endpoint
Everything works fine when Metadata do have Bindings.
Thank you for your help
Youssef Ghorbal
More information about the users
mailing list