idp 4.0 with oidc 2.0, no OIDCExtendedNamingRegistry

Cantor, Scott cantor.2 at osu.edu
Thu Apr 30 19:09:34 EDT 2020


On 4/30/20, 7:00 PM, "users on behalf of Jim Fox" <users-bounces at shibboleth.net on behalf of fox at washington.edu> wrote:
> I also don't see any OIDCExtendedNamingRegistry in any of the jars in the oidc distribution.  Which one should it be in?

idp-oidc-extension-impl-whatever.jar contains /META-INF/net.shibboleth.idp/postconfig.xml, which has that, and other, definitions in it.

Before you ask, yes, it's possible for the IdP to do this sort of thing, but there are limitations on importing files into other files that cause problems keeping things working when idp.home is both a file path or a classpath expression, which makes our testing process much harder. Keeping things in the filesystem allows for more consistent behavior.

It did allow this particular bit of XML addition to be automatic for "most" people deploying it, you just weren't one of those people unfortunately.

-- Scott




More information about the users mailing list