IdP v3 Relying Party Configuration

[Peter Schober]

* Kevin Ratcliffe <kratcliffe at bolton-sfc.ac.uk> [2016-02-04 11:12]:
> I've read through
> https://wiki.shibboleth.net/confluence/display/IDP30/RelyingPartyConfiguration#RelyingPartyConfiguration-Overrides and it's making very little sense to me, sorry. The following is my best guess(don't laugh).
> 
> <bean parent="RelyingPartyByName" c:relyingPartyIds=""urn:federation:MicrosoftOnline"">
>     <property name="profileConfigurations">
>         <list>
>             <bean parent="SAML2.SSO.Profile" p:signAssertions="conditional" />
>             <bean parent="SAML2.SSO.Profile" p:encryptAssertions="never" />
>             <bean parent="SAML2.SSO.Profile" p:encryptNameIds="never" />
>         </list>
>     </property>
> </bean>
> 
> Am I on the right track with this?

Not quite.

* The double doublequotes you have around the URN are not invalid XML

* Also you don't need to change any of the properties other than
p:encryptAssertions, I think. At least conditional signing and not
encrypting NameIDs should be the default anyway.

* All properties can/should be set on the same bean

* The name of the parent bean is "SAML2.SSO", not "SAML2.SSO.Profile".

-peter