encryptNameIDs default for SAML2.SSO

[Ullfig, Roberto Alfredo]

I'm assuming it's true but I don't see it mentioned in the profiles in the documentation. It's one of the common settings we have for relying party exceptions. Also, isn't the logic of:

encryptionOptional="false" - Whether to automatically disable encryption if the relying party does not possess a suitable key

reversed? The default setting allows for SPs with or without keys, so encryption is optional by default but the value is false.

---
Roberto Ullfig - rullfig at uic.edu
Systems Administrator
Enterprise Applications & Services | Technology Solutions
University of Illinois - Chicago
________________________________
From: users <users-bounces at shibboleth.net> on behalf of Ullfig, Roberto Alfredo <rullfig at uic.edu>
Sent: Wednesday, October 20, 2021 4:22 PM
To: Shib Users <users at shibboleth.net>
Subject: encryptNameIDs default for SAML2.SSO

What's the default value for encryptNameIDs in SAML2.SSO?

---
Roberto Ullfig - rullfig at uic.edu
Systems Administrator
Enterprise Applications & Services | Technology Solutions
University of Illinois - Chicago
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20211020/b0d55159/attachment.htm>