Disable assertion encryption

[Pablo Vidaurri]

I have the same requirement for one of my SP's. This is what I have in my
relying party:

<!-- disable assertion encryption -->
<bean parent="RelyingPartyByName" c:relyingPartyIds="#{{'
https://some1.sp.com/auth/saml', 'http://some2.sp.com/sample/samlclient'}}">
            <property name="profileConfigurations">
                <list>
                    <bean parent="SAML2.SSO"
p:nameIDFormatPrecedence="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"
p:encryptAssertions="false"/>
                        <ref bean="SAML2.ECP" />
                        <ref bean="SAML2.Logout" />
                        <ref bean="SAML2.AttributeQuery" />
                        <ref bean="SAML2.ArtifactResolution" />
                        <ref bean="Liberty.SSOS" />
                </list>
            </property>
        </bean>

Working as expected.



On Fri, Sep 25, 2020 at 8:00 AM Ramkumar Ramsubbu <
ramkumar.ramsubbu.consultant at nielsen.com> wrote:

> Hi Steve,
>
> Yes, It looks like this only.
>
> Thanks,
> Ramkumar Ramasubbu
> CPS
>
>
>
> On Fri, Sep 25, 2020 at 6:26 PM Mak, Steve <makst at upenn.edu> wrote:
>
>> Ramkumar,
>>
>> In the off chance that there's a misunderstanding here, does your
>> "encrypted" SAML response look something like this?
>>
>>
>> PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48c2FtbDJwOlJlc3……jpBdHRyaWJ1dGVTdGF0ZW1lbnQ+PC9zYW1sMjpBc3NlcnRpb24+PC9zYW1sMnA6UmVzcG9uc2U+
>>
>> - Steve
>>
>> --
>> For Consortium Member technical support, see
>> https://wiki.shibboleth.net/confluence/x/coFAAg
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200925/eed4d58a/attachment.htm>