Disabling Encrypted Assertions and Encrypted NameIDs in IDPv3?

[McKean, Brandon Scott - mckeanbs]

Hi Everyone,

I have been trying to setup an IDPv3 instance to cater to a vendor application. Unfortunately the settings they outline appear to just be v2 centric at this time.

Here's the documentation of theres that I'm referring to: https://doc.arcgis.com/en/arcgis-online/reference/configure-shibboleth.htm

Specifically, I believe I'm having trouble with their Step 6, disabling encrypted assertions and encrypted nameids. From what I could tell, the equivalent configuration in v3 is something like the following:

<bean id="shibboleth.DefaultRelyingParty" parent="RelyingParty">
<property name="profileConfigurations">
<list>
<bean parent="Shibboleth.SSO" p:postAuthenticationFlows="attribute-release" />
<ref bean="SAML1.AttributeQuery" />
<ref bean="SAML1.ArtifactResolution" />
<bean parent="SAML2.SSO" p:postAuthenticationFlows="attribute-release" />
<bean parent="SAML2.SSO" p:encryptAssertions="Never"/>
<bean parent="SAML2.SSO" p:encryptNameIDs="Never"/>

<ref bean="SAML2.ECP" />
<ref bean="SAML2.Logout" />
<ref bean="SAML2.AttributeQuery" />
<ref bean="SAML2.ArtifactResolution" />
</list>
</property>
</bean>





Does this look to be correct? If not can someone point me in the right direction? I've tried looking at the wiki for relying-party but I find it a bit lacking in very clear examples for this.

Thanks for any aid you can render on this.


--
Brandon McKean
IT / Systems
Linux Administrator
(540)568-4235

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150612/5895d9ca/attachment.html>