<div dir="ltr"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">&lt;bean parent=&quot;<u></u>RelyingPartyByName&quot; c:<u></u>relyingPartyIds=&quot;<a href="https://sp.example.org" target="_blank">https://sp.<u></u>example.org</a>&quot;&gt;<br>
    &lt;property name=&quot;<u></u>profileConfigurations&quot;&gt;<br>
        &lt;list&gt;<br>
            &lt;bean parent=&quot;<u></u>Shibboleth.SSO&quot; p:<u></u>securityConfiguration-ref=&quot;<u></u>shibboleth.<u></u>SigningConfiguration.SHA1&quot; /&gt;<br>
            &lt;bean parent=&quot;<u></u>SAML1.AttributeQuery&quot; p:<u></u>securityConfiguration-ref=&quot;<u></u>shibboleth.<u></u>SigningConfiguration.SHA1&quot; /&gt;<br>
            &lt;bean parent=&quot;<u></u>SAML1.ArtifactResolution&quot; p:<u></u>securityConfiguration-ref=&quot;<u></u>shibboleth.<u></u>SigningConfiguration.SHA1&quot; /&gt;<br>
            &lt;bean parent=&quot;<u></u>SAML2.SSO&quot; p:<u></u>securityConfiguration-ref=&quot;<u></u>shibboleth.<u></u>SigningConfiguration.SHA1&quot; /&gt;<br>
            &lt;bean parent=&quot;<u></u>SAML2.ECP&quot; p:<u></u>securityConfiguration-ref=&quot;<u></u>shibboleth.<u></u>SigningConfiguration.SHA1&quot; /&gt;<br>
            &lt;bean parent=&quot;<u></u>SAML2.Logout&quot; p:<u></u>securityConfiguration-ref=&quot;<u></u>shibboleth.<u></u>SigningConfiguration.SHA1&quot; /&gt;<br>
            &lt;bean parent=&quot;<u></u>SAML2.AttributeQuery&quot; p:<u></u>securityConfiguration-ref=&quot;<u></u>shibboleth.<u></u>SigningConfiguration.SHA1&quot; /&gt;<br>
            &lt;bean parent=&quot;<u></u>SAML2.ArtifactResolution&quot; p:<u></u>securityConfiguration-ref=&quot;<u></u>shibboleth.<u></u>SigningConfiguration.SHA1&quot; /&gt;<br>
        &lt;/list&gt;<br>
    &lt;/property&gt;<br>
&lt;/bean&gt;<br></blockquote><div><br></div><div>That part is fine. You just need to wrap it inside the overrides list like the following:</div><div><br></div><div>    &lt;util:list id=&quot;shibboleth.RelyingPartyOverrides&quot;&gt;</div><div>        &lt;!-- Disable SAML2 SSO encryption for broken vendor SPs --&gt;</div><div>        &lt;bean parent=&quot;RelyingPartyByName&quot;</div><div>              c:relyingPartyIds=&quot;#{{</div><div>                &#39;<a href="https://virginiatech.maps.arcgis.com/shibboleth">https://virginiatech.maps.arcgis.com/shibboleth</a>&#39;, &#39;<a href="https://vt-test.maps.arcgis.com/shibboleth&#39;}">https://vt-test.maps.arcgis.com/shibboleth&#39;}</a>}&quot;&gt;</div><div>            &lt;property name=&quot;profileConfigurations&quot;&gt;</div><div>                &lt;list&gt;</div><div>                    &lt;bean parent=&quot;SAML2.SSO&quot; p:encryptAssertions=&quot;false&quot; /&gt;</div><div>                &lt;/list&gt;</div><div>            &lt;/property&gt;</div><div>        &lt;/bean&gt;</div><div>    &lt;/util:list&gt; </div><div><br></div><div>I recently read the docs and felt they could be clearer on that point. Your question seems to support that.</div><div><br></div><div>M</div><div><br></div></div></div>