Identity Provider - All work - Shibboleth Jira

IDP-2409

attribute-release consent shown for passive login

Tom Zeller

sascha.hoppler

Medium

Unresolved

Oct 27, 2025, 2:41 PM

Oct 27, 2025, 11:26 PM

IDP-2408

Distingishing OIDC login_hint from IdP session hintedName

Scott Cantor

sascha.hoppler

Medium

Done

Sep 26, 2025, 3:46 PM

Sep 29, 2025, 3:49 PM

IDP-2407

Add NameID decoding to SAML login flow

Scott Cantor

Highest

Done

Sep 24, 2025, 7:55 PM

Oct 01, 2025, 12:55 PM

IDP-2406

Support max-age generically in IdP profile config

Scott Cantor

Hong Ye

Highest

Unresolved

Sep 14, 2025, 2:56 PM

Sep 16, 2025, 5:47 PM

IDP-2405

Metadata refresh failures cause IDP Pause

Brent Putman

Garth Sainio

Highest

Unresolved

Aug 28, 2025, 1:26 PM

Oct 03, 2025, 1:55 PM

IDP-2404

Authentication Authorities Erroneously Added to AuthnContext

Scott Cantor

Dave Lafferty

Highest

Invalid

Aug 27, 2025, 3:01 PM

Aug 27, 2025, 3:16 PM

IDP-2403

Consider profile option to generate a form for CAS GET responses

Marvin Addison

Scott Cantor

Highest

Unresolved

Aug 26, 2025, 1:06 PM

IDP-2402

Add CAS service URL validator

Marvin Addison

Scott Cantor

Highest

Unresolved

Aug 26, 2025, 1:04 PM

IDP-2401

Consider adding audit field for encoded CAS service URL

Scott Cantor

Highest

Unresolved

Aug 26, 2025, 1:02 PM

IDP-2400

Spring 6.2 changed MessageSource Locale parameter annotation

Scott Cantor

Highest

Fixed

Aug 19, 2025, 3:57 PM

Aug 19, 2025, 5:47 PM

IDP-2398

idp.no.tidy is not respected for the input property file

Rod Widdowson

Highest

Fixed

Aug 16, 2025, 3:41 PM

Aug 17, 2025, 12:19 PM

IDP-2397

Use project.version to set msi internal version

Rod Widdowson

Highest

Completed

Aug 16, 2025, 3:10 PM

Sep 18, 2025, 4:04 PM

IDP-2396

Release IdP 5.1.6

Brent Putman

Highest

Completed

Aug 15, 2025, 3:14 PM

Aug 26, 2025, 12:23 PM

IDP-2395

Release IdP 5.1.5

Brent Putman

Philip Smart

Highest

Completed

Aug 06, 2025, 3:35 PM

Aug 13, 2025, 11:17 PM

IDP-2394

Consistent return codes for plugin installation failures?

Rod Widdowson

Liam Hoekenga

Highest

Completed

Aug 05, 2025, 8:33 PM

Aug 06, 2025, 6:58 PM

IDP-2393

AACLI for OIDC OP

Unassigned

peter

Highest

Unresolved

Jul 28, 2025, 1:17 PM

Jul 28, 2025, 1:27 PM

IDP-2392

Could allow for both SP and IdP RequestedPrincipalContexts

Scott Cantor

Highest

Unresolved

Jul 24, 2025, 12:52 PM

IDP-2391

TOUs should allow varying pluggable expiration

Scott Cantor

Hari Mailvaganam

Highest

Unresolved

Jul 18, 2025, 7:23 PM

Jul 21, 2025, 1:34 PM

IDP-2389

Typo in shibboleth.Conditions.PrincipalInnResult bean name

Scott Cantor

Clay Cooper

Highest

Fixed

Jul 03, 2025, 4:41 PM

Jul 14, 2025, 2:54 PM

IDP-2388

Add timeout to the "update check" in the IdP (and plugins)

Rod Widdowson

Highest

Completed

Jul 03, 2025, 1:50 PM

Jul 12, 2025, 3:17 PM

IDP-2387

web.xml doesn't pass schema validation

Scott Cantor

Dan McLaughlin

Highest

Unresolved

Jun 20, 2025, 12:23 AM

Aug 28, 2025, 12:23 PM

IDP-2386

Save TOU consent language independent

Tom Zeller

Lambertz, Björn

Highest

Unresolved

Jun 18, 2025, 6:53 AM

Jun 18, 2025, 11:09 PM

IDP-2385

Allow installer control of the Base IdP URL (idp\profile) in the metadata

Rod Widdowson

Dan McLaughlin

Highest

Unresolved

Jun 17, 2025, 5:52 AM

Jun 26, 2025, 3:58 PM

IDP-2384

Consider a bin/lib-plugin directorty

Rod Widdowson

Highest

Unresolved

Jun 15, 2025, 12:50 PM

Jun 16, 2025, 2:18 PM

IDP-2383

Distinguish IdP- vs SP-driven RequestedPrincipalContext

Scott Cantor

Highest

Done

Jun 10, 2025, 12:32 PM

Jun 10, 2025, 1:02 PM

IDP-2382

Feature or plugin to produce a signed metadata feed

Unassigned

Scott Cantor

Highest

Unresolved

Jun 09, 2025, 1:38 PM

IDP-2381

Add moduleId in module logging at startup

Rod Widdowson

Philip Smart

Highest

Done

Jun 06, 2025, 2:35 PM

Aug 06, 2025, 5:49 PM

IDP-2380

Audit field of the authenticating authority data when proxying

Unassigned

Scott Cantor

Highest

Unresolved

May 22, 2025, 3:58 PM

May 22, 2025, 3:59 PM

IDP-2379

Release Jetty-Base MSI for Jetty 12.0.20

Unassigned

Rod Widdowson

Highest

Completed

May 09, 2025, 1:33 PM

May 30, 2025, 3:37 PM

IDP-2378

Accessing metrics/updates always triggers four HTTPS requests

Rod Widdowson

Steven Premeau

Low

Unresolved

May 04, 2025, 6:20 PM

May 05, 2025, 2:10 PM

IDP-2377

Statically defined web.xml-based filters are not running

Scott Cantor

Highest

Unresolved

May 02, 2025, 3:58 PM

May 02, 2025, 6:12 PM

IDP-2376

Consider turning off signature generation for the idp-msi project (or supressing the project)

Rod Widdowson

Highest

Unresolved

Apr 20, 2025, 9:45 AM

Apr 26, 2025, 2:22 PM

IDP-2375

Aliased decoded IdPAttributes are lost during subsequent use

Scott Cantor

Highest

Completed

Apr 17, 2025, 7:01 PM

May 01, 2025, 7:30 PM

IDP-2374

Implement support for SameSite directly when possible

Scott Cantor

Highest

Completed

Apr 09, 2025, 4:39 PM

Apr 21, 2025, 1:09 PM

IDP-2373

Ensure a conditional import exists in each authn flow's bean file

Scott Cantor

Highest

Completed

Apr 02, 2025, 1:51 PM

Apr 02, 2025, 2:20 PM

IDP-2372

Upgrade to latest 5.2 SNAPSHOT on legacy system cannot find shibboleth.ProxyNameTransforms

Scott Cantor

Rod Widdowson

Blocker

Unresolved

Mar 28, 2025, 10:16 AM

Mar 31, 2025, 3:43 PM

IDP-2371

Current Windows jetty-base images include wrong logback jar versions

Unassigned

Rod Widdowson

Critical

Fixed

Mar 28, 2025, 6:13 AM

Mar 28, 2025, 10:00 AM

IDP-2370

Deprecate authenticationFlows profile setting

Scott Cantor

Highest

Unresolved

Mar 26, 2025, 8:52 PM

IDP-2369

LDAPCredentialValidator does not invoke correct diagnostic message method from Ldaptive v2 to allow use of the option to encode control characters

Daniel Fisher

Kenneth J. Jaeger

Medium

Fixed

Mar 26, 2025, 5:11 PM

Aug 13, 2025, 2:29 PM

IDP-2368

Install template/example deployment descriptors

Rod Widdowson

Scott Cantor

Highest

Unresolved

Mar 26, 2025, 4:28 PM

Apr 01, 2025, 2:26 PM

IDP-2367

Upgrade breaks use of attributes.properties via idp.searchForProperties

Scott Cantor

Tero Marttila

Low

Fixed

Mar 26, 2025, 3:07 PM

Mar 31, 2025, 1:15 PM

IDP-2366

Release IdP 5.1.4

Brent Putman

Highest

Completed

Mar 26, 2025, 3:44 AM

Mar 27, 2025, 7:13 PM

IDP-2365

Support multiple definitions of a given login flow

Scott Cantor

Highest

Done

Mar 19, 2025, 12:27 PM

Mar 21, 2025, 5:22 PM

IDP-2364

CryptoTransient name ID decoders should trap exceptions

Scott Cantor

Highest

Fixed

Feb 26, 2025, 4:59 PM

Feb 27, 2025, 7:13 PM

IDP-2363

Dynamic opt-in for persistent longer session lifetime

Scott Cantor

Philip Brusten

Highest

Done

Feb 25, 2025, 10:24 PM

Mar 19, 2025, 4:47 PM

IDP-2362

Consider extending ProfileConfiguration to supply Jackson serializaton

Scott Cantor

Highest

Unresolved

Feb 19, 2025, 7:09 PM

IDP-2361

Add logout support to DynamicResponseHeaderFilter

Scott Cantor

dub357@gmail.com

Highest

Won't Do

Feb 17, 2025, 7:40 PM

Mar 18, 2025, 5:05 PM

IDP-2360

Add support for rolling consent record lifetime

Tom Zeller

Timo Tunturi

Highest

Unresolved

Feb 13, 2025, 7:46 AM

Mar 18, 2025, 3:38 PM

IDP-2359

"AttributeInMetadata" AFP examples need 'onlyIfRequired="false"'

Scott Cantor

Wil Cooley

Highest

Fixed

Feb 13, 2025, 6:13 AM

Feb 13, 2025, 2:15 PM

IDP-2358

Consent condition on back-channel flows invoked incorrectly

Scott Cantor

Highest

Fixed

Feb 12, 2025, 7:58 PM

Mar 27, 2025, 2:23 PM

Work	Assignee	Reporter	Priority	Resolution	Created	Updated
IDP-2409 attribute-release consent shown for passive login	Tom Zeller	sascha.hoppler	Medium	Unresolved	Oct 27, 2025, 2:41 PM	Oct 27, 2025, 11:26 PM
IDP-2408 Distingishing OIDC login_hint from IdP session hintedName	Scott Cantor	sascha.hoppler	Medium	Done	Sep 26, 2025, 3:46 PM	Sep 29, 2025, 3:49 PM
IDP-2407 Add NameID decoding to SAML login flow	Scott Cantor	Scott Cantor	Highest	Done	Sep 24, 2025, 7:55 PM	Oct 01, 2025, 12:55 PM
IDP-2406 Support max-age generically in IdP profile config	Scott Cantor	Hong Ye	Highest	Unresolved	Sep 14, 2025, 2:56 PM	Sep 16, 2025, 5:47 PM
IDP-2405 Metadata refresh failures cause IDP Pause	Brent Putman	Garth Sainio	Highest	Unresolved	Aug 28, 2025, 1:26 PM	Oct 03, 2025, 1:55 PM
IDP-2404 Authentication Authorities Erroneously Added to AuthnContext	Scott Cantor	Dave Lafferty	Highest	Invalid	Aug 27, 2025, 3:01 PM	Aug 27, 2025, 3:16 PM
IDP-2403 Consider profile option to generate a form for CAS GET responses	Marvin Addison	Scott Cantor	Highest	Unresolved	Aug 26, 2025, 1:06 PM	Aug 26, 2025, 1:06 PM
IDP-2402 Add CAS service URL validator	Marvin Addison	Scott Cantor	Highest	Unresolved	Aug 26, 2025, 1:04 PM	Aug 26, 2025, 1:04 PM
IDP-2401 Consider adding audit field for encoded CAS service URL	Scott Cantor	Scott Cantor	Highest	Unresolved	Aug 26, 2025, 1:02 PM	Aug 26, 2025, 1:02 PM
IDP-2400 Spring 6.2 changed MessageSource Locale parameter annotation	Scott Cantor	Scott Cantor	Highest	Fixed	Aug 19, 2025, 3:57 PM	Aug 19, 2025, 5:47 PM
IDP-2398 idp.no.tidy is not respected for the input property file	Rod Widdowson	Rod Widdowson	Highest	Fixed	Aug 16, 2025, 3:41 PM	Aug 17, 2025, 12:19 PM
IDP-2397 Use project.version to set msi internal version	Rod Widdowson	Rod Widdowson	Highest	Completed	Aug 16, 2025, 3:10 PM	Sep 18, 2025, 4:04 PM
IDP-2396 Release IdP 5.1.6	Brent Putman	Brent Putman	Highest	Completed	Aug 15, 2025, 3:14 PM	Aug 26, 2025, 12:23 PM
IDP-2395 Release IdP 5.1.5	Brent Putman	Philip Smart	Highest	Completed	Aug 06, 2025, 3:35 PM	Aug 13, 2025, 11:17 PM
IDP-2394 Consistent return codes for plugin installation failures?	Rod Widdowson	Liam Hoekenga	Highest	Completed	Aug 05, 2025, 8:33 PM	Aug 06, 2025, 6:58 PM
IDP-2393 AACLI for OIDC OP	Unassigned	peter	Highest	Unresolved	Jul 28, 2025, 1:17 PM	Jul 28, 2025, 1:27 PM
IDP-2392 Could allow for both SP and IdP RequestedPrincipalContexts	Scott Cantor	Scott Cantor	Highest	Unresolved	Jul 24, 2025, 12:52 PM	Jul 24, 2025, 12:52 PM
IDP-2391 TOUs should allow varying pluggable expiration	Scott Cantor	Hari Mailvaganam	Highest	Unresolved	Jul 18, 2025, 7:23 PM	Jul 21, 2025, 1:34 PM
IDP-2389 Typo in shibboleth.Conditions.PrincipalInnResult bean name	Scott Cantor	Clay Cooper	Highest	Fixed	Jul 03, 2025, 4:41 PM	Jul 14, 2025, 2:54 PM
IDP-2388 Add timeout to the "update check" in the IdP (and plugins)	Rod Widdowson	Rod Widdowson	Highest	Completed	Jul 03, 2025, 1:50 PM	Jul 12, 2025, 3:17 PM
IDP-2387 web.xml doesn't pass schema validation	Scott Cantor	Dan McLaughlin	Highest	Unresolved	Jun 20, 2025, 12:23 AM	Aug 28, 2025, 12:23 PM
IDP-2386 Save TOU consent language independent	Tom Zeller	Lambertz, Björn	Highest	Unresolved	Jun 18, 2025, 6:53 AM	Jun 18, 2025, 11:09 PM
IDP-2385 Allow installer control of the Base IdP URL (idp\profile) in the metadata	Rod Widdowson	Dan McLaughlin	Highest	Unresolved	Jun 17, 2025, 5:52 AM	Jun 26, 2025, 3:58 PM
IDP-2384 Consider a bin/lib-plugin directorty	Rod Widdowson	Rod Widdowson	Highest	Unresolved	Jun 15, 2025, 12:50 PM	Jun 16, 2025, 2:18 PM
IDP-2383 Distinguish IdP- vs SP-driven RequestedPrincipalContext	Scott Cantor	Scott Cantor	Highest	Done	Jun 10, 2025, 12:32 PM	Jun 10, 2025, 1:02 PM
IDP-2382 Feature or plugin to produce a signed metadata feed	Unassigned	Scott Cantor	Highest	Unresolved	Jun 09, 2025, 1:38 PM	Jun 09, 2025, 1:38 PM
IDP-2381 Add moduleId in module logging at startup	Rod Widdowson	Philip Smart	Highest	Done	Jun 06, 2025, 2:35 PM	Aug 06, 2025, 5:49 PM
IDP-2380 Audit field of the authenticating authority data when proxying	Unassigned	Scott Cantor	Highest	Unresolved	May 22, 2025, 3:58 PM	May 22, 2025, 3:59 PM
IDP-2379 Release Jetty-Base MSI for Jetty 12.0.20	Unassigned	Rod Widdowson	Highest	Completed	May 09, 2025, 1:33 PM	May 30, 2025, 3:37 PM
IDP-2378 Accessing metrics/updates always triggers four HTTPS requests	Rod Widdowson	Steven Premeau	Low	Unresolved	May 04, 2025, 6:20 PM	May 05, 2025, 2:10 PM
IDP-2377 Statically defined web.xml-based filters are not running	Scott Cantor	Scott Cantor	Highest	Unresolved	May 02, 2025, 3:58 PM	May 02, 2025, 6:12 PM
IDP-2376 Consider turning off signature generation for the idp-msi project (or supressing the project)	Rod Widdowson	Rod Widdowson	Highest	Unresolved	Apr 20, 2025, 9:45 AM	Apr 26, 2025, 2:22 PM
IDP-2375 Aliased decoded IdPAttributes are lost during subsequent use	Scott Cantor	Scott Cantor	Highest	Completed	Apr 17, 2025, 7:01 PM	May 01, 2025, 7:30 PM
IDP-2374 Implement support for SameSite directly when possible	Scott Cantor	Scott Cantor	Highest	Completed	Apr 09, 2025, 4:39 PM	Apr 21, 2025, 1:09 PM
IDP-2373 Ensure a conditional import exists in each authn flow's bean file	Scott Cantor	Scott Cantor	Highest	Completed	Apr 02, 2025, 1:51 PM	Apr 02, 2025, 2:20 PM
IDP-2372 Upgrade to latest 5.2 SNAPSHOT on legacy system cannot find shibboleth.ProxyNameTransforms	Scott Cantor	Rod Widdowson	Blocker	Unresolved	Mar 28, 2025, 10:16 AM	Mar 31, 2025, 3:43 PM
IDP-2371 Current Windows jetty-base images include wrong logback jar versions	Unassigned	Rod Widdowson	Critical	Fixed	Mar 28, 2025, 6:13 AM	Mar 28, 2025, 10:00 AM
IDP-2370 Deprecate authenticationFlows profile setting	Scott Cantor	Scott Cantor	Highest	Unresolved	Mar 26, 2025, 8:52 PM	Mar 26, 2025, 8:52 PM
IDP-2369 LDAPCredentialValidator does not invoke correct diagnostic message method from Ldaptive v2 to allow use of the option to encode control characters	Daniel Fisher	Kenneth J. Jaeger	Medium	Fixed	Mar 26, 2025, 5:11 PM	Aug 13, 2025, 2:29 PM
IDP-2368 Install template/example deployment descriptors	Rod Widdowson	Scott Cantor	Highest	Unresolved	Mar 26, 2025, 4:28 PM	Apr 01, 2025, 2:26 PM
IDP-2367 Upgrade breaks use of attributes.properties via idp.searchForProperties	Scott Cantor	Tero Marttila	Low	Fixed	Mar 26, 2025, 3:07 PM	Mar 31, 2025, 1:15 PM
IDP-2366 Release IdP 5.1.4	Brent Putman	Brent Putman	Highest	Completed	Mar 26, 2025, 3:44 AM	Mar 27, 2025, 7:13 PM
IDP-2365 Support multiple definitions of a given login flow	Scott Cantor	Scott Cantor	Highest	Done	Mar 19, 2025, 12:27 PM	Mar 21, 2025, 5:22 PM
IDP-2364 CryptoTransient name ID decoders should trap exceptions	Scott Cantor	Scott Cantor	Highest	Fixed	Feb 26, 2025, 4:59 PM	Feb 27, 2025, 7:13 PM
IDP-2363 Dynamic opt-in for persistent longer session lifetime	Scott Cantor	Philip Brusten	Highest	Done	Feb 25, 2025, 10:24 PM	Mar 19, 2025, 4:47 PM
IDP-2362 Consider extending ProfileConfiguration to supply Jackson serializaton	Scott Cantor	Scott Cantor	Highest	Unresolved	Feb 19, 2025, 7:09 PM	Feb 19, 2025, 7:09 PM
IDP-2361 Add logout support to DynamicResponseHeaderFilter	Scott Cantor	dub357@gmail.com	Highest	Won't Do	Feb 17, 2025, 7:40 PM	Mar 18, 2025, 5:05 PM
IDP-2360 Add support for rolling consent record lifetime	Tom Zeller	Timo Tunturi	Highest	Unresolved	Feb 13, 2025, 7:46 AM	Mar 18, 2025, 3:38 PM
IDP-2359 "AttributeInMetadata" AFP examples need 'onlyIfRequired="false"'	Scott Cantor	Wil Cooley	Highest	Fixed	Feb 13, 2025, 6:13 AM	Feb 13, 2025, 2:15 PM
IDP-2358 Consent condition on back-channel flows invoked incorrectly	Scott Cantor	Scott Cantor	Highest	Fixed	Feb 12, 2025, 7:58 PM	Mar 27, 2025, 2:23 PM