[EXTERNAL] Multiple entity-id:s for SP-half of IdP?
Cantor, Scott
cantor.2 at osu.edu
Wed Apr 3 13:58:13 UTC 2024
> if I'm being daft, but I am running 5.1.1 so what did you mean by
> that?
I assumed you were running 4.x, which had a bug making it impossible to "match up" the identity of the proxy with the Recipient value in the XML coming in. That prevents the decryption logic from finding "its" encrypted key in the document to proceed with.
No reason I know of it wouldn't work in a new version, we should be handling that step now. It could still be broken I suppose.
I verified in Jira, it was patched in 5.0.
https://shibboleth.atlassian.net/issues/OSJ-362
I had thought one of the original reports had verified the fix worked, but I don't really know for sure.
-- Scott
More information about the users
mailing list