1 files changed, 6 insertions, 3 deletions
diff --git a/id.server/src/at/gv/egovernment/moa/id/auth/AuthenticationServer.java b/id.server/src/at/gv/egovernment/moa/id/auth/AuthenticationServer.java
index 2baa172f1..0d3166090 100644
--- a/id.server/src/at/gv/egovernment/moa/id/auth/AuthenticationServer.java
+++ b/id.server/src/at/gv/egovernment/moa/id/auth/AuthenticationServer.java
@@ -446,7 +446,7 @@ public class AuthenticationServer implements MOAIDAuthConstants {
 
     session.setIdentityLink(identityLink);
     // now validate the extended infoboxes
-    verifyInfoboxes(session, infoboxReadResponseParameters);
+    verifyInfoboxes(session, infoboxReadResponseParameters, !oaParam.getProvideStammzahl());
     // builds the AUTH-block
     String authBlock = buildAuthenticationBlock(session);
 //    session.setAuthBlock(authBlock);
@@ -507,12 +507,15 @@ public class AuthenticationServer implements MOAIDAuthConstants {
    * @param infoboxReadResponseParams   The parameters returned from the BKU as response
    *                                    to an infobox read request (including the infobox
    *                                    tokens to be verified).
+   * @param hideStammzahl               Indicates whether source pins (<code>Stammzahl</code>en) 
+   *                                    should be hidden in any SAML attribute that may be
+   *                                    returned by a validator.
    * 
    * @throws AuthenticationException If the verification of at least one infobox fails.
    * @throws ConfigurationException  If the OAuthParameter cannot be extracted.
    */
   private void verifyInfoboxes(
-    AuthenticationSession session, Map infoboxReadResponseParams) 
+    AuthenticationSession session, Map infoboxReadResponseParams, boolean hideStammzahl) 
   throws ValidateException, ConfigurationException
   {
     
@@ -584,7 +587,7 @@ public class AuthenticationServer implements MOAIDAuthConstants {
               // build the parameters for validating the infobox
               InfoboxValidatorParams infoboxValidatorParams = 
                 InfoboxValidatorParamsBuilder.buildInfoboxValidatorParams(
-                  session, verifyInfoboxParameter, infoboxTokenList);
+                  session, verifyInfoboxParameter, infoboxTokenList, hideStammzahl);
               // now validate the infobox
               boolean infoboxValid = false;
               try {