IPv6 in SubjectLocality.Address / SubjectConfirmationData.Address

[Pascal Rigaux]

Hi,

We have a SP choking on IPv6 in SAML2 assertion generated by shibboleth idp.

Example:

<saml2:SubjectConfirmationData Address="2001:660:3305:100:ba2b:5a30:dd6:3f" ...>
...
<saml2:SubjectLocality Address="2001:660:3305:100:ba2b:5a30:dd6:3f"/>

=> it throws the following error:

Method createLocalAuthentication: cannot create a ClearTrust token for user Pascal.Rigaux at univ-paris1.fr, FAILURE,
sirrus.runtime.TokenException: Invalid value "2001:660:3305:100:ba2b:5a30:dd6:3f" for TokenKeys.SC_END_USER_IP


Question: is there a way to disable sending the address when it is IPv6 for a specific SP? It is useless anyway since the SP is IPv4 only and can not check the IP!


Thanks,
cu.