Shibboleth Developers

[Halm Reusser <>]

Hi Brent,

Brent Putman wrote:

> Ok, it's definitely not running the security policy, at least, there's no
> log output for the delegation-specific rules for client cert auth and 
> assertion token validation.  So it's almost certainly the case that the 
> relying-party.xml config is incorrect in some way [...]

You got it. I've verified the relying-party.xml again and indeed in the
following ProfileConfiguration was missing in the DefaultRelyingParty:

<ProfileConfiguration xsi:type="samldel:LibertyIDWSFSSOSProfile"
  allowTokenDelegation="false"
  signAssertions="always"
  encryptNameIds="never"
  securityPolicyRef="shibboleth.ext.delegation.LibertySSOSPolicy"/>

Thanks for the hints, have a nice weekend.

-Halm