Can EncryptionMethod be specified per SP and not in SP metadata?

[Mohamed Lrhazi]

Hello,

An LLM suggested this config in relying-party.xml, but it must be wrong...
is this possible?

<bean parent="RelyingPartyByName"
c:relyingPartyIds="#{{
'https://auth.overdrive.com/v2/external/saml/trust'
}}">
<property name="profileConfigurations">
<list>
<bean parent="SAML2.SSO"
p:postAuthenticationFlows="#{{'context-check'}}"
p:encryptAssertions="true" p:signAssertions="true" >
<property name="encryptionConfigurations">
<list>
<ref bean="shibboleth.EncryptionConfiguration.CBC" />
</list>
</property>
</bean>
</list>
</property>
</bean>


This results in error:

2025-01-14T17:57:21.505227-05:00 idp-prd-01.cua.edu
saml-idp-server-v5-prod-idp-1/107dd2babc7c[1148]:
 shib-idp;idp-warn.log;dev;nothing;Caused by:
org.springframework.beans.NotWritablePropertyException: Invalid property
'encryptionConfigurations' of bean class
[net.shibboleth.idp.saml.saml2.profile.config.impl.BrowserSSOProfileConfiguration]:
Bean property 'encryptionConfigurations' is not writable or has an invalid
setter method. Does the parameter type of the setter match the return type
of the getter?


Thanks,
Mohamed.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20250114/8e980e13/attachment.htm>