From: cantor <cantor@cb58f699-b61c-0410-a6fe-9272a202ed29>
Date: Sun, 5 Apr 2009 19:31:22 +0000 (+0000)
Subject: Add commented delegation rule.
X-Git-Tag: 2.4~338
X-Git-Url: http://www.project-moonshot.org/gitweb/?a=commitdiff_plain;h=2bcde75eb720ef13ce25c7d5e53dab97e6071f7d;p=shibboleth%2Fsp.git

Add commented delegation rule.

git-svn-id: https://svn.middleware.georgetown.edu/cpp-sp/branches/REL_2@2966 cb58f699-b61c-0410-a6fe-9272a202ed29
---

diff --git a/configs/shibboleth2.xml b/configs/shibboleth2.xml
index b1ae6d3..aa2286f 100644
--- a/configs/shibboleth2.xml
+++ b/configs/shibboleth2.xml
@@ -252,12 +252,15 @@
         -->
         <Policy id="default" validate="false">
             <PolicyRule type="MessageFlow" checkReplay="true" expires="60"/>
-            <PolicyRule type="Conditions"/>
+            <PolicyRule type="Conditions">
+                <PolicyRule type="Audience"/>
+                <!-- Enable Delegation rule to permit delegated access. -->
+                <!-- <PolicyRule type="Delegation"/> -->
+            </PolicyRule>
             <PolicyRule type="ClientCertAuth" errorFatal="true"/>
             <PolicyRule type="XMLSigning" errorFatal="true"/>
             <PolicyRule type="SimpleSigning" errorFatal="true"/>
         </Policy>
     </SecurityPolicies>
 
-</SPConfig>
-
+</SPConfig>
\ No newline at end of file