
<html dir="ltr">

<head>

<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">

<style id="owaParaStyle" type="text/css">P {margin-top:0;margin-bottom:0;}</style>

</head>

<body ocsi="0" fpstyle="1">

<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Hi Everyone,<br>

<br>

I have been trying to setup an IDPv3 instance to cater to a vendor application. Unfortunately the settings they outline appear to just be v2 centric at this time.<br>

<br>

Here's the documentation of theres that I'm referring to: https://doc.arcgis.com/en/arcgis-online/reference/configure-shibboleth.htm<br>

<br>

Specifically, I believe I'm having trouble with their Step 6, disabling encrypted assertions and encrypted nameids. From what I could tell, the equivalent configuration in v3 is something like the following:<br>

<br>

<bean id="shibboleth.DefaultRelyingParty" parent="RelyingParty"><br>

<property name="profileConfigurations"><br>

<list><br>

<bean parent="Shibboleth.SSO" p:postAuthenticationFlows="attribute-release" /><br>

<ref bean="SAML1.AttributeQuery" /><br>

<ref bean="SAML1.ArtifactResolution" /><br>

<bean parent="SAML2.SSO" p:postAuthenticationFlows="attribute-release" /><br>

<bean parent="SAML2.SSO" p:encryptAssertions="Never"/><br>

<bean parent="SAML2.SSO" p:encryptNameIDs="Never"/><br>

<br>

<ref bean="SAML2.ECP" /><br>

<ref bean="SAML2.Logout" /><br>

<ref bean="SAML2.AttributeQuery" /><br>

<ref bean="SAML2.ArtifactResolution" /><br>

</list><br>

</property><br>

</bean><br>

<br>

<br>

<br>

<br>

<br>

Does this look to be correct? If not can someone point me in the right direction? I've tried looking at the wiki for relying-party but I find it a bit lacking in very clear examples for this.<br>

<br>

Thanks for any aid you can render on this.<br>

<br>

<br>

<div class="moz-signature">-- <br>

Brandon McKean<br>

IT / Systems<br>

Linux Administrator<br>

(540)568-4235<br>

</div>

<br>

</div>

</body>

</html>