skipEndpointValidationWhenSigned is no more honored after IdP 3 upgrade

Youssef Ghorbal youssef.ghorbal at pasteur.fr
Sat Jul 18 07:58:22 EDT 2015


Hello,

	I’ve upgraded an IdP to the latest 3 track. I’ve followed the recommendation to move to the new relaying-party.xml conf style.
	In the v2 configuration we’ve activated the skipEndpointValidationWhenSigned so that we don’t need Binding definition in the metadata.
	After the upgrade we’ve added the property to the SAML2.SSO bean so it looks like :

    <bean id="shibboleth.DefaultRelyingParty" parent="RelyingParty">
        <property name="profileConfigurations">
            <list>
                <bean parent="Shibboleth.SSO" p:postAuthenticationFlows="attribute-release" />
                <ref bean="SAML1.AttributeQuery" />
                <ref bean="SAML1.ArtifactResolution" />
                <bean parent="SAML2.SSO" p:postAuthenticationFlows="attribute-release"  p:skipEndpointValidationWhenSigned="true"/>
                <ref bean="SAML2.ECP" />
                <ref bean="SAML2.Logout" />
                <ref bean="SAML2.AttributeQuery" />
                <ref bean="SAML2.ArtifactResolution" />
            </list>
        </property>
    </bean>

	But this does not seem to work, the IdP rises an error at the SSO initialiazation :

2015-07-18 13:54:59,745 - WARN [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:402] - Profile Action PopulateBindingAndEndpointContexts: Unable to resolve outbound message endpoint

	Everything works fine when Metadata do have Bindings.

	Thank you for your help

Youssef Ghorbal
	


More information about the users mailing list