Impersonation and resolutionPhases="intercept/impersonate"

Cantor, Scott cantor.2 at osu.edu
Mon Feb 17 20:01:01 UTC 2025


> Is there some very basic thing I've done wrong? (This is with
> v5.1.3, and its a RDB type DC.)

I suspect in fact neither is working, for reasons too complex to explain [1], but in general the feature didn't work right in a lot of cases, and I would guess that's one such case.

But it's not going to be specific to part of the resolver, it's a problem in getting to the label when executing the condition and so the label is being ignored in many cases.

Fixed in 5.2.0.

-- Scott

[1] https://shibboleth.atlassian.net/browse/JSATTR-36



More information about the users mailing list