relying-party override and signResponses

[Powell, Alan]

The document which Blackboard released for getting eAccounts to work with IDP 3.x says to have an override like this:

<bean parent="RelyingPartyByName" c:relyingPartyIds="[entitiyIds]">

<property name="profileConfigurations">

<list>

    <bean parent="SAML2.SSO" p:signResponses="never" p:encryptAssertions="false"  />

     <bean parent="SAML2.AttributeQuery" p:encryptAssertions="false" />  (because they seemingly insist in 443)

</list>

</property>

</bean>


 p:signResponses=“never” confused me as I though the new syntax was for it to be true or false. This example worked so I began to wonder and discovered that this works



   <bean parent="RelyingPartyByName" c:relyingPartyIds="[entitiyIds]">

            <property name="profileConfigurations">

                <list>

                     <bean parent="SAML2.SSO"  p:signResponses="xxx" p:encryptAssertions="false"  />

                     <bean parent="SAML2.AttributeQuery" p:encryptAssertions="false" />

                </list>

            </property>

        </bean>


Its entirely possible I am confused but  is this a bug? Shouldn’t only true or false work for  p:signResponses?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160429/33fbeeb0/attachment-0001.html>