From 0847c9ecc75ccd5d38d09e96c6d09c8326d6a7e5 Mon Sep 17 00:00:00 2001
From: Thomas <>
Date: Wed, 30 Nov 2022 12:52:56 +0100
Subject: feat(ida): remove NameIdPolicy PERSISTENT from IDA SAML2 request
Reason: The IDA Shibboleth IDP does not support PERSISTENT yet
---
.../IdAustriaClientAuthRequestBuilderConfiguration.java | 11 +++++------
.../config/IdAustriaAuthRequestBuilderConfiguration.java | 3 +--
2 files changed, 6 insertions(+), 8 deletions(-)
(limited to 'modules')
diff --git a/modules/authmodule-eIDAS-v2/src/main/java/at/asitplus/eidas/specific/modules/auth/eidas/v2/idaustriaclient/IdAustriaClientAuthRequestBuilderConfiguration.java b/modules/authmodule-eIDAS-v2/src/main/java/at/asitplus/eidas/specific/modules/auth/eidas/v2/idaustriaclient/IdAustriaClientAuthRequestBuilderConfiguration.java
index 65b6a198..d24f0637 100644
--- a/modules/authmodule-eIDAS-v2/src/main/java/at/asitplus/eidas/specific/modules/auth/eidas/v2/idaustriaclient/IdAustriaClientAuthRequestBuilderConfiguration.java
+++ b/modules/authmodule-eIDAS-v2/src/main/java/at/asitplus/eidas/specific/modules/auth/eidas/v2/idaustriaclient/IdAustriaClientAuthRequestBuilderConfiguration.java
@@ -2,15 +2,14 @@ package at.asitplus.eidas.specific.modules.auth.eidas.v2.idaustriaclient;
import java.util.List;
-import at.gv.egiz.eaaf.modules.pvp2.api.credential.EaafX509Credential;
-import at.gv.egiz.eaaf.modules.pvp2.api.reqattr.EaafRequestedAttribute;
-import at.gv.egiz.eaaf.modules.pvp2.sp.api.IPvpAuthnRequestBuilderConfiguruation;
-
import org.opensaml.saml.saml2.core.AuthnContextComparisonTypeEnumeration;
-import org.opensaml.saml.saml2.core.NameIDType;
import org.opensaml.saml.saml2.metadata.EntityDescriptor;
import org.w3c.dom.Element;
+import at.gv.egiz.eaaf.modules.pvp2.api.credential.EaafX509Credential;
+import at.gv.egiz.eaaf.modules.pvp2.api.reqattr.EaafRequestedAttribute;
+import at.gv.egiz.eaaf.modules.pvp2.sp.api.IPvpAuthnRequestBuilderConfiguruation;
+
public class IdAustriaClientAuthRequestBuilderConfiguration implements IPvpAuthnRequestBuilderConfiguruation {
private boolean isPassive;
@@ -64,7 +63,7 @@ public class IdAustriaClientAuthRequestBuilderConfiguration implements IPvpAuthn
*/
@Override
public String getNameIdPolicyFormat() {
- return NameIDType.PERSISTENT;
+ return null;
}
/*
diff --git a/modules/authmodule_id-austria/src/main/java/at/asitplus/eidas/specific/modules/auth/idaustria/config/IdAustriaAuthRequestBuilderConfiguration.java b/modules/authmodule_id-austria/src/main/java/at/asitplus/eidas/specific/modules/auth/idaustria/config/IdAustriaAuthRequestBuilderConfiguration.java
index 52bd1c5f..9009868f 100644
--- a/modules/authmodule_id-austria/src/main/java/at/asitplus/eidas/specific/modules/auth/idaustria/config/IdAustriaAuthRequestBuilderConfiguration.java
+++ b/modules/authmodule_id-austria/src/main/java/at/asitplus/eidas/specific/modules/auth/idaustria/config/IdAustriaAuthRequestBuilderConfiguration.java
@@ -3,7 +3,6 @@ package at.asitplus.eidas.specific.modules.auth.idaustria.config;
import java.util.List;
import org.opensaml.saml.saml2.core.AuthnContextComparisonTypeEnumeration;
-import org.opensaml.saml.saml2.core.NameIDType;
import org.opensaml.saml.saml2.metadata.EntityDescriptor;
import org.w3c.dom.Element;
@@ -71,7 +70,7 @@ public class IdAustriaAuthRequestBuilderConfiguration implements IPvpAuthnReques
*/
@Override
public String getNameIdPolicyFormat() {
- return NameIDType.PERSISTENT;
+ return null;
}
/*
--
cgit v1.2.3