iOS Word -> Sharepoint -> ADFS -> Shibboleth

[Cantor, Scott]

On 10/28/17, 7:29 AM, "users on behalf of Waldemar Rosenfeld" <users-bounces at shibboleth.net on behalf of waldemar.rosenfeld at apiida.com> wrote:

> Is it possible to disable the MessageReplay check for testing purpose? Didn’t find a solution for that in the documentation.

For testing, it's easy, just comment out that step in system/flows/saml/saml2/sso-security-flow.xml

It's not exposed in any way at the moment. It requires customizing inbound interceptor flows being wired in internally as security policy enforcement and that involves a lot of dangerous changes or touching system files as above which won't survive an update.

The most readily "exposed" way of doing this is actually by implementing a "null" StorageService implementation in Java and plugging that in by pointing the replay cache at it. Not real elegant but anything else involves uglier work.

-- Scott