Getting PowerFAIDS NetPartner to work with Shibboleth 3
Peter Schober
peter.schober at univie.ac.at
Tue May 8 16:44:58 EDT 2018
* Daudt, Carl <crdaudt at taylor.edu> [2018-05-08 22:06]:
> <bean parent="RelyingPartyByName" c:relyingPartyIds="https://mynetpartnerhost.myuniversity.edu">
> <property name="profileConfigurations">
> <list>
> <bean parent="SAML2.SSO"
> p:nameIDFormatPrecedence="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
> p:encryptNameIDs="false"
> p:encryptAssertions="false"
> />
> </list>
> </property>
> </bean>
Also note that you already have the NameIDFormat in the metadata, and
that encryption of NameIDs has not been the default for many, many
years now. So the only relevant setting there is avoiding encryption
of the assertion.
In case you've set idp.encryption.optional to true in your
conf/idp.properties that would make the whole relaying party override
above superfluous. (Not that I'm advocating you set this now, just
that if you had it, you wouldn't need any of the above.)
-peter
More information about the users
mailing list