SSPCPP-356 - Better support message-level security on the back channel
authorScott Cantor <cantor.2@osu.edu>
Tue, 10 May 2016 20:38:17 +0000 (16:38 -0400)
committerScott Cantor <cantor.2@osu.edu>
Tue, 10 May 2016 20:38:17 +0000 (16:38 -0400)
https://issues.shibboleth.net/jira/browse/SSPCPP-356

Set default signing/encryption values appropriately.

configs/example-shibboleth2.xml

index f361089..944f8fa 100644 (file)
@@ -95,7 +95,7 @@
                          REMOTE_USER="eppn persistent-id targeted-id"
                          metadataAttributePrefix="Meta-"
                          sessionHook="/Shibboleth.sso/AttrChecker"
-                         signing="false" encryption="false">
+                         signing="conditional" encryption="conditional">
 
         <!--
         Controls session lifetimes, address checks, cookie handling, and the protocol handlers.