Disabling off Encryption for a Relying Party

Charles R. Tompkins crt at ufl.edu
Fri Oct 16 09:13:00 EDT 2015


This is working for me for an omniauth-based SP:

        <bean parent="RelyingPartyByName" c:relyingPartyIds="#{{
            'https://sp.example.org'
            }}" >
            <property name="profileConfigurations">
                <list>
                    <bean parent="SAML2.SSO" 
                        p:signResponses="false" 
                        p:signAssertions="true" 
                        p:encryptAssertions="false" 
                        p:encryptNameIDs="false" />
                </list>
            </property>
        </bean>



-Charles



-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Rod Widdowson
Sent: Friday, October 16, 2015 8:55 AM
To: 'Shib Users' <users at shibboleth.net>
Subject: RE: Disabling off Encryption for a Relying Party


> Can someone provide an example of the version 3 configuration and if
possible point me to the appropriate DOC's for IdP version 3?  

> <bean parent="RelyingPartyByName" c:relyingPartyIds="apperian.com">

You might be being caught by
http://shibboleth.net/pipermail/users/2015-July/022664.html

That takes a list and for reasons that are too complicated to go into right
now (follow the threads from that link) a single entry will appear to work
but doesn't.

Does 

<bean parent="RelyingPartyByName" c:relyingPartyIds="#{{'apperian.com'}}">

Work?



-- 
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4793 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20151016/b26cc357/attachment-0001.p7s>


More information about the users mailing list