RelyingPartyOverrides

[Marvin Addison]

>
> <bean parent="RelyingPartyByName" c:relyingPartyIds="https://sp.
> example.org">
>     <property name="profileConfigurations">
>         <list>
>             <bean parent="Shibboleth.SSO" p:securityConfiguration-ref="
> shibboleth.SigningConfiguration.SHA1" />
>             <bean parent="SAML1.AttributeQuery" p:
> securityConfiguration-ref="shibboleth.SigningConfiguration.SHA1" />
>             <bean parent="SAML1.ArtifactResolution" p:
> securityConfiguration-ref="shibboleth.SigningConfiguration.SHA1" />
>             <bean parent="SAML2.SSO" p:securityConfiguration-ref="
> shibboleth.SigningConfiguration.SHA1" />
>             <bean parent="SAML2.ECP" p:securityConfiguration-ref="
> shibboleth.SigningConfiguration.SHA1" />
>             <bean parent="SAML2.Logout" p:securityConfiguration-ref="
> shibboleth.SigningConfiguration.SHA1" />
>             <bean parent="SAML2.AttributeQuery" p:
> securityConfiguration-ref="shibboleth.SigningConfiguration.SHA1" />
>             <bean parent="SAML2.ArtifactResolution" p:
> securityConfiguration-ref="shibboleth.SigningConfiguration.SHA1" />
>         </list>
>     </property>
> </bean>
>

That part is fine. You just need to wrap it inside the overrides list like
the following:

    <util:list id="shibboleth.RelyingPartyOverrides">
        <!-- Disable SAML2 SSO encryption for broken vendor SPs -->
        <bean parent="RelyingPartyByName"
              c:relyingPartyIds="#{{
                'https://virginiatech.maps.arcgis.com/shibboleth', '
https://vt-test.maps.arcgis.com/shibboleth'}}">
            <property name="profileConfigurations">
                <list>
                    <bean parent="SAML2.SSO" p:encryptAssertions="false" />
                </list>
            </property>
        </bean>
    </util:list>

I recently read the docs and felt they could be clearer on that point. Your
question seems to support that.

M
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150323/794ce11f/attachment-0001.html