InCommon RelyingPartyOverride in IdP 3.2.1

[brabec at ncsu.edu]

> > This Override works, but only because I duplicated all the
> > profileConfigurations from the default. It doesn't appear to inherit.
> 
> No, it never has.

Thanks Scott. I was reading it wrong. 

> I would have to be pointed to such an example.

I saw this example in the relying-party.xml:
----code---- 
        <!--
        Override example that identifies a single RP by name and configures it
        for SAML 2 SSO without encryption. This is a common "vendor" scenario.
        -->
        <bean parent="RelyingPartyByName" c:relyingPartyIds="https://sp.example.org">
            <property name="profileConfigurations">
                <list>
                    <bean parent="SAML2.SSO" p:encryptAssertions="false" />
                </list>
            </property>
        </bean>
----code----

I assumed that meant it just overrode the one setting for SAML2.SSO
and used the rest of the defaults. Not that it meant that host
would do *only* SAML2 SSO with that setting. Re-reading the comment
I see that now.

Charles

-- 
Dr. Charles J. Brabec - brabec at ncsu.edu       
Web Systems Architect - Identity/Web Services 

All electronic mail messages in connection with State business which are
sent to or received by this account are subject to the NC Public Records Law
and may be disclosed to third parties.