<!DOCTYPE html>
<html>
  <head>

    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p>Hi list,</p>
    <p>we've installed the new plugins for one client. There is a new
      Deprecation in the IdP Log, <span style="font-family:monospace"><span
          style="color:#000000;background-color:#ffffff;">setRetrieveUserInfoEndpointClaims
        </span></span><span
        style="color:#000000;background-color:#ffffff;">should be</span><span
        style="font-family:monospace"><span
          style="color:#000000;background-color:#ffffff;"> </span></span><span
        style="font-family:monospace"><span
          style="color:#000000;background-color:#ffffff;">setRetrieveUserInfoEndpointClaimsPredicate
        </span></span>now. </p>
    <p>I guess this stems from
      <a class="moz-txt-link-freetext" href="https://shibboleth.atlassian.net/browse/JCOMOIDC-132">https://shibboleth.atlassian.net/browse/JCOMOIDC-132</a> ... but how
      can I get rid of the deprecation warning? I cannot find this
      predicate when grepping in the configuration.</p>
    <div class="moz-forward-container">Regards <br>
    </div>
    <div class="moz-forward-container">Martin<br>
    </div>
    <div class="moz-forward-container"><br>
    </div>
    <div class="moz-forward-container">-------- Weitergeleitete
      Nachricht --------
      <table cellpadding="0" cellspacing="0" border="0"
        class="moz-email-headers-table">
        <tbody>
          <tr>
            <th valign="BASELINE" align="RIGHT" nowrap="nowrap">Betreff:
            </th>
            <td>OIDC OP v4.3.0 and OIDC RP Authentication Proxy v2.3.0
              Now Available</td>
          </tr>
          <tr>
            <th valign="BASELINE" align="RIGHT" nowrap="nowrap">Datum: </th>
            <td>Mon, 23 Jun 2025 14:56:36 +0000</td>
          </tr>
          <tr>
            <th valign="BASELINE" align="RIGHT" nowrap="nowrap">Von: </th>
            <td>Philip Smart via announce
              <a class="moz-txt-link-rfc2396E" href="mailto:announce@shibboleth.net"><announce@shibboleth.net></a></td>
          </tr>
          <tr>
            <th valign="BASELINE" align="RIGHT" nowrap="nowrap">Antwort
              an: </th>
            <td><a class="moz-txt-link-abbreviated" href="mailto:users@shibboleth.net">users@shibboleth.net</a></td>
          </tr>
          <tr>
            <th valign="BASELINE" align="RIGHT" nowrap="nowrap">An: </th>
            <td><a class="moz-txt-link-abbreviated" href="mailto:announce@shibboleth.net">announce@shibboleth.net</a> <a class="moz-txt-link-rfc2396E" href="mailto:announce@shibboleth.net"><announce@shibboleth.net></a></td>
          </tr>
          <tr>
            <th valign="BASELINE" align="RIGHT" nowrap="nowrap">Kopie
              (CC): </th>
            <td>Philip Smart <a class="moz-txt-link-rfc2396E" href="mailto:Philip.Smart@jisc.ac.uk"><Philip.Smart@jisc.ac.uk></a></td>
          </tr>
        </tbody>
      </table>
      <br>
      <br>
      The Shibboleth Project has released V4.3.0 of the OIDC OP plugin
      (see release notes at [1]) and V2.3.0 of the OIDC RP
      authentication proxy plugin (see release notes in [2]).<br>
      <br>
      Both releases accompany, and require, a new version of the OIDC
      commons library (see release notes at [3]) and OIDC config module.<br>
      <br>
      Among the new features and bug fixes, both the OP and RP now
      include safeguards against audience injection attacks that could
      result from third-party software behavior, see the release notes.
      Importantly, our software was not directly vulnerable to these
      attacks, but we’ve added these configurable protections as a
      proactive measure.<br>
      <br>
      -- Henri Mikkonen and Phil Smart, on behalf of the team<br>
      <br>
      [1]
<a class="moz-txt-link-freetext" href="https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/2776760321/OPReleaseNotes">https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/2776760321/OPReleaseNotes</a><br>
      <br>
      [2]
<a class="moz-txt-link-freetext" href="https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3239968769/OIDCRelyingPartyAuthnConfigurationReleaseNotes">https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3239968769/OIDCRelyingPartyAuthnConfigurationReleaseNotes</a><br>
      <br>
      [3]
<a class="moz-txt-link-freetext" href="https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3232137218/OIDCCommonReleaseNotes">https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3232137218/OIDCCommonReleaseNotes</a><br>
      <br>
      Jisc is a registered charity (in England and Wales under charity
      number 1149740; in Scotland under charity number SC053607) and a
      company limited by guarantee registered in England under company
      number 05747339, VAT number GB 197 0632 86. Jisc's registered
      office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.<br>
      <br>
      <br>
      Jisc Services Limited is a wholly owned Jisc subsidiary and a
      company limited by guarantee which is registered in England under
      company number 02881024, VAT number GB 197 0632 86. The registered
      office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.<br>
      <br>
      <br>
      For more details on how Jisc handles your data see our privacy
      notice here: <a class="moz-txt-link-freetext" href="https://www.jisc.ac.uk/website/privacy-notice">https://www.jisc.ac.uk/website/privacy-notice</a><br>
      --<br>
      To unsubscribe from this list send an email to
      <a class="moz-txt-link-abbreviated" href="mailto:announce-unsubscribe@shibboleth.net">announce-unsubscribe@shibboleth.net</a><br>
    </div>
  </body>
</html>