<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.E-MailFormatvorlage17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=DE link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>Hi,<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'><o:p> </o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'>I want to disable encryption of assertions for one of our test SPs.<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'>I tried to implement it with a predicate passed as p:encryptAssertions-ref.<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'>Part of my configuration is below.<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'><o:p> </o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'>Unfortunately I get an error stating “nested exception is java.lang.IllegalArgumentException: Cannot convert value of type 'net.shibboleth.utilities.java.support.logic.PredicateSupport$$Lambda$678/0x0000000840ee1840' to required type 'boolean' for property 'encryptAssertions'”<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'><o:p> </o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'>Is this a bad idea from the start or is it only a small error?<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'>Kind Regards<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'>Clemens<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'><o:p> </o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'><bean id="custom.ShouldEncrypt" parent="shibboleth.Conditions.NOT"><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> <constructor-arg><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> <bean parent="shibboleth.Conditions.RelyingPartyId"><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> <constructor-arg name="candidates"><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> <list><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> <value>https://idm-lab01-dev.example.com/shibboleth</value><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> </list><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> </constructor-arg><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> </bean><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> </constructor-arg><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> </bean><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'><o:p> </o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> <!-- define defaults with tou and attribute release --><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> <bean id="SAML2.SSO.default" parent="SAML2.SSO"<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> p:postAuthenticationFlows="#{ {'terms-of-use', 'attribute-release'} }"<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> p:nameIDFormatPrecedence="#{{<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> 'urn:mace:heidi-hessen.de:SAML:2.0:nameid-format:heidiuuid',<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> 'urn:oasis:names:tc:SAML:2.0:nameid-format:persistent',<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient' }}"<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> p:encryptAssertions-ref="custom.ShouldEncrypt"<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> /><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'><o:p> </o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> <!-- Default configuration, with default settings applied for all profiles. --><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> <bean id="shibboleth.DefaultRelyingParty" parent="RelyingParty" p:responderIdLookupStrategy-ref="profileResponderIdLookupFunction"><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> <property name="profileConfigurations"><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> <list><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> <!-- SAML 1.1 and SAML 2.0 AttributeQuery are disabled by default. Use Puppet parameters aq_sps and aq_tags. --><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'><o:p> </o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> <bean parent="Shibboleth.SSO" p:postAuthenticationFlows="#{ {'terms-of-use', 'attribute-release'} }"/><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> <ref bean="SAML1.ArtifactResolution" /><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'><o:p> </o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> <ref bean="SAML2.SSO.default" /><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> <ref bean="SAML2.Logout" /><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> <ref bean="SAML2.ArtifactResolution" /><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'><o:p> </o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> <ref bean="Liberty.SSOS" /><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'><o:p> </o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> <bean parent="CAS.LoginConfiguration" p:postAuthenticationFlows="#{ {'terms-of-use', 'attribute-release'} }" /><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> <ref bean="CAS.ProxyConfiguration" /><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> <ref bean="CAS.ValidateConfiguration" /><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> </list><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> </property><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'> </bean><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span lang=EN-US style='font-size:11.0pt'><o:p> </o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt;mso-fareast-language:DE'>Viele Grüße<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt;mso-fareast-language:DE'>Clemens (Bergmann)<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt;mso-fareast-language:DE'>-- <o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt;mso-fareast-language:DE'>Clemens Bergmann<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt;mso-fareast-language:DE'>Gruppe Nutzermanagement und Entwicklung<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt;mso-fareast-language:DE'>Technische Universität Darmstadt<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt;mso-fareast-language:DE'>Hochschulrechenzentrum, Alexanderstraße 2, 64289 Darmstadt<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt;mso-fareast-language:DE'>Tel. +49 6151 16 71184<o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt;mso-fareast-language:DE'><a href="http://www.hrz.tu-darmstadt.de/"><font color=black><span style='color:windowtext'>http://www.hrz.tu-darmstadt.de/</span></font></a><o:p></o:p></span></font></p><p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'><o:p> </o:p></span></font></p></div></body></html>