From dd2be368cdceab6b02bf9a73b6db08a05be53e69 Mon Sep 17 00:00:00 2001
From: Thomas Lenz <tlenz@iaik.tugraz.at>
Date: Mon, 22 Feb 2016 14:27:32 +0100
Subject: fix possible problem with federated assertion validation

---
 .../moa/id/protocols/pvp2x/verification/SAMLVerificationEngine.java     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/pvp2x/verification/SAMLVerificationEngine.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/pvp2x/verification/SAMLVerificationEngine.java
index 812e27a36..bf9a61fe4 100644
--- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/pvp2x/verification/SAMLVerificationEngine.java
+++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/pvp2x/verification/SAMLVerificationEngine.java
@@ -195,7 +195,7 @@ public class SAMLVerificationEngine {
 					
 					}
 				}
-				if (!isValidDestination) {
+				if (!isValidDestination && validateDestination) {
 					Logger.warn("PVP 2.1 assertion destination does not match to IDP URL");
 					throw new AssertionValidationExeption("PVP 2.1 assertion destination does not match to IDP URL", null);					
 					
-- 
cgit v1.2.3