[EXTERNAL] Multiple entity-id:s for SP-half of IdP?

Cantor, Scott cantor.2 at osu.edu
Wed Apr 3 13:58:13 UTC 2024


> if I'm being daft, but I am running 5.1.1 so what did you mean by
> that? 

I assumed you were running 4.x, which had a bug making it impossible to "match up" the identity of the proxy with the Recipient value in the XML coming in. That prevents the decryption logic from finding "its" encrypted key in the document to proceed with.

No reason I know of it wouldn't work in a new version, we should be handling that step now. It could still be broken I suppose.

I verified in Jira, it was patched in 5.0.

https://shibboleth.atlassian.net/issues/OSJ-362 

I had thought one of the original reports had verified the fix worked, but I don't really know for sure.

-- Scott








More information about the users mailing list