delegation in IDP3

[Robert A Basch]

OK, thanks.  I captured a DEBUG trace anyway, so if you do want to see
it, please let me know the best way to pass it along.

Also, I can confirm that I tried following the example RP configs you
provided earlier, using the shibboleth.Conditions.AllowedSAMLPresenters
parent bean, and that part now works.

Thanks again,
Bob


> On Jul 26, 2016, at 5:34 PM, Brent Putman <putmanb at georgetown.edu> wrote:
> 
> 
> 
> On 7/26/16 5:24 PM, Robert A Basch wrote:
>> Thanks for your reply.  I will try to get a full DEBUG trace soon,
> 
> Actually, you probably don't need to do that.  I wrote that before I figured out what the problem was and forgot to remove from my email.  
> 
> 
>>  but, if
>> it helps, I will note that we use CryptoTransient IDs in v2, which I believe
>> is the default in v3.  We actually ran into a bug there initially, which
>> required a patch to the extension:
>> 
>>   
>> https://issues.shibboleth.net/jira/browse/SIDP-606
> 
> Yep, sounds like a very similar issue.  Re-reading that I have absolutely no recollection of doing that patch, but I guess we re-discovered the problem, and essentially the same solution. :-)
> 
> 
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net