Shibboleth IdP Upgrade from IDP v3.4.4 to v4.3.3

[Rammohan Reddy]

Hi,

We are currently working on upgrading our Shibboleth IdP from version 3.x
to version 4.x After modifying the configuration files in IdP, we are
encountering an issue with the SAML response and we are unable to procede
further.

Current Version: IDP v3.4.4

Planning to Upgrade: IDP v4.3.3

Java version-17 & Apache Tomcat Version 9.0.86

After upgrade from 3.x to 4.x, we have observed below Exception in idp-logs:

----------------------------------------------------

ERROR [net.shibboleth.idp.saml.profile:39] - Uncaught runtime exception
org.springframework.binding.expression.EvaluationException: An ELException
occurred getting the value for expression
'PopulateBindingAndEndpointContexts' on context [class
org.springframework.webflow.engine.impl.RequestControlContextImpl]
at
org.springframework.binding.expression.spel.SpringELExpression.getValue(SpringELExpression.java:104)
Caused by: org.springframework.expression.spel.SpelEvaluationException:
EL1021E: A problem occurred whilst attempting to access the property
'PopulateBindingAndEndpointContexts': 'Error creating bean with name
'PopulateBindingAndEndpointContexts' defined in class path resource
[net/shibboleth/idp/flows/saml/saml-abstract-beans.xml]: Initialization of
bean failed; nested exception is
org.springframework.beans.TypeMismatchException: Failed to convert property
value of type 'java.lang.String' to required type 'boolean' for property
'artifactImpliesSecureChannel'; nested exception is
java.lang.IllegalArgumentException: Invalid boolean value
[yourSecureChannel]'
at
org.springframework.expression.spel.ast.PropertyOrFieldReference.readProperty(PropertyOrFieldReference.java:215)
Caused by: org.springframework.beans.factory.BeanCreationException: Error
creating bean with name 'PopulateBindingAndEndpointContexts' defined in
class path resource
[net/shibboleth/idp/flows/saml/saml-abstract-beans.xml]: Initialization of
bean failed; nested exception is
org.springframework.beans.TypeMismatchException: Failed to convert property
value of type 'java.lang.String' to required type 'boolean' for property
'artifactImpliesSecureChannel'; nested exception is
java.lang.IllegalArgumentException: Invalid boolean value
[yourSecureChannel]

---------------------------------------------------

As we observed, *system\flows\saml\saml-abstract-beans.xml* is no longer
exists in IDP v4.x.

Please find the attached log files.

Kindly help us to resolve this issue and proceed further.

Thank you.


Regards,

Rammohan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240805/4a4ff511/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: idp-warn.log
Type: application/octet-stream
Size: 20808 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20240805/4a4ff511/attachment.obj>