<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:70.85pt 70.85pt 56.7pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Remove me.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> users <users-bounces@shibboleth.net> <b>On Behalf Of
</b>Bergmann, Clemens<br>
<b>Sent:</b> Wednesday, September 8, 2021 2:52 PM<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Subject:</b> disable assertion encryption by entityID<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p><strong><span lang="DE" style="font-size:7.5pt;font-family:"Arial",sans-serif;color:#C00000">EXTERNAL</span></strong><span lang="DE"><o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span lang="DE">Hi,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE"><o:p> </o:p></span></p>
<p class="MsoNormal">I want to disable encryption of assertions for one of our test SPs.<o:p></o:p></p>
<p class="MsoNormal">I tried to implement it with a predicate passed as p:encryptAssertions-ref.<o:p></o:p></p>
<p class="MsoNormal">Part of my configuration is below.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Unfortunately I get an error stating “nested exception is java.lang.IllegalArgumentException: Cannot convert value of type 'net.shibboleth.utilities.java.support.logic.PredicateSupport$$Lambda$678/0x0000000840ee1840' to required type 'boolean'
for property 'encryptAssertions'”<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Is this a bad idea from the start or is it only a small error?<o:p></o:p></p>
<p class="MsoNormal">Kind Regards<o:p></o:p></p>
<p class="MsoNormal">Clemens<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><bean id="custom.ShouldEncrypt" parent="shibboleth.Conditions.NOT"><o:p></o:p></p>
<p class="MsoNormal"> <constructor-arg><o:p></o:p></p>
<p class="MsoNormal"> <bean parent="shibboleth.Conditions.RelyingPartyId"><o:p></o:p></p>
<p class="MsoNormal"> <constructor-arg name="candidates"><o:p></o:p></p>
<p class="MsoNormal"> <list><o:p></o:p></p>
<p class="MsoNormal"> <value><a href="https://idm-lab01-dev.example.com/shibboleth%3c/value">https://idm-lab01-dev.example.com/shibboleth</value</a>><o:p></o:p></p>
<p class="MsoNormal"> </list><o:p></o:p></p>
<p class="MsoNormal"> </constructor-arg><o:p></o:p></p>
<p class="MsoNormal"> </bean><o:p></o:p></p>
<p class="MsoNormal"> </constructor-arg><o:p></o:p></p>
<p class="MsoNormal"> </bean><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> <!-- define defaults with tou and attribute release --><o:p></o:p></p>
<p class="MsoNormal"> <bean id="SAML2.SSO.default" parent="SAML2.SSO"<o:p></o:p></p>
<p class="MsoNormal"> p:postAuthenticationFlows="#{ {'terms-of-use', 'attribute-release'} }"<o:p></o:p></p>
<p class="MsoNormal"> p:nameIDFormatPrecedence="#{{<o:p></o:p></p>
<p class="MsoNormal"> 'urn:mace:heidi-hessen.de:SAML:2.0:nameid-format:heidiuuid',<o:p></o:p></p>
<p class="MsoNormal"> 'urn:oasis:names:tc:SAML:2.0:nameid-format:persistent',<o:p></o:p></p>
<p class="MsoNormal"> 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient' }}"<o:p></o:p></p>
<p class="MsoNormal"> p:encryptAssertions-ref="custom.ShouldEncrypt"<o:p></o:p></p>
<p class="MsoNormal"> /><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> <!-- Default configuration, with default settings applied for all profiles. --><o:p></o:p></p>
<p class="MsoNormal"> <bean id="shibboleth.DefaultRelyingParty" parent="RelyingParty" p:responderIdLookupStrategy-ref="profileResponderIdLookupFunction"><o:p></o:p></p>
<p class="MsoNormal"> <property name="profileConfigurations"><o:p></o:p></p>
<p class="MsoNormal"> <list><o:p></o:p></p>
<p class="MsoNormal"> <!-- SAML 1.1 and SAML 2.0 AttributeQuery are disabled by default. Use Puppet parameters aq_sps and aq_tags. --><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> <bean parent="Shibboleth.SSO" p:postAuthenticationFlows="#{ {'terms-of-use', 'attribute-release'} }"/><o:p></o:p></p>
<p class="MsoNormal"> <ref bean="SAML1.ArtifactResolution" /><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> <ref bean="SAML2.SSO.default" /><o:p></o:p></p>
<p class="MsoNormal"> <ref bean="SAML2.Logout" /><o:p></o:p></p>
<p class="MsoNormal"> <ref bean="SAML2.ArtifactResolution" /><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> <ref bean="Liberty.SSOS" /><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> <bean parent="CAS.LoginConfiguration" p:postAuthenticationFlows="#{ {'terms-of-use', 'attribute-release'} }" /><o:p></o:p></p>
<p class="MsoNormal"> <ref bean="CAS.ProxyConfiguration" /><o:p></o:p></p>
<p class="MsoNormal"> <ref bean="CAS.ValidateConfiguration" /><o:p></o:p></p>
<p class="MsoNormal"> </list><o:p></o:p></p>
<p class="MsoNormal"> </property><o:p></o:p></p>
<p class="MsoNormal"> </bean><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="DE" style="mso-fareast-language:DE">Viele Grüße<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE" style="mso-fareast-language:DE">Clemens (Bergmann)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE" style="mso-fareast-language:DE">-- <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE" style="mso-fareast-language:DE">Clemens Bergmann<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE" style="mso-fareast-language:DE">Gruppe Nutzermanagement und Entwicklung<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE" style="mso-fareast-language:DE">Technische Universität Darmstadt<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE" style="mso-fareast-language:DE">Hochschulrechenzentrum, Alexanderstraße 2, 64289 Darmstadt<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE" style="mso-fareast-language:DE">Tel. +49 6151 16 71184<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE" style="mso-fareast-language:DE"><a href="http://www.hrz.tu-darmstadt.de/"><span style="color:windowtext">http://www.hrz.tu-darmstadt.de/</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE"><o:p> </o:p></span></p>
</div>
</div>
<p><span style="color: #000000;"><strong>GSK monitors email communications sent to and from GSK in order to protect GSK, our employees, customers, suppliers and business partners, from cyber threats and loss of GSK Information. GSK monitoring is conducted with
appropriate confidentiality controls and in accordance with local laws and after appropriate consultation.</strong></span></p>
</body>
</html>