All work

Raise JAAS LoginHandler succeed/fail log from DEBUG to INFO

Using two attribute dependencies in a templated attribute yields erroneous output

Default logging config turns Spring logging OFF

install.sh should exit non-zero (failure) if JAVACMD not executable

NPE after error relating to SAML 2 artifact resolution

Generated metadata should not include signing-only certificate without a use attribute

IdP-included endorsed/xercesImpl-2.10.0.jar exposes XML parsing to CVE-2013-4002 vulnerability

Prevent No-login-context errors due to duplicate logins

Release process for 2.4.2

Grammatical error in error.jsp

Useless HTTP Requests with multiple ConfigurationResource

Completing 2.4.1 release

IdP distribution files (http://shibboleth.net/downloads/identity-provider/) later than 2.3.6 lack .sha1 fingerprint files

Exclude svnkit from distribution due to licensing

Prepare QuickInstaller for 2.4.1 release

Cross browser IdP session cannot be terminated

Intermittent GET Requests Being Sent to POST/SSO Endpoint

Incorrect/misleading Kerberos authentication example in login.config

IdP delegation extension problem using CryptoTransient principal connector

scriptlet that works with jre7 does not with jre 8

IdP stopping metadata retrieval

StoreId failover gives error

SLO: also clear the client-side cookie when logging out at the IdP

Make the inbound message issuer (SP's entity ID) available to logout.jsp

2.4.0 install fails on certificate generation

encoding problem in IdP backup metadata file

IdP stopping metadata retrieval

Windows QuickInstall 2.4.0 conf and metadata templates outdated

Add ability to return additional SAML failure codes to RP

NullpointerException when using Script-based attributes

login.jsp - contactTypes are ignored in idpui:serviceContact

log level too high?

Log level a bit too high on IdP Session cookie warning

java.lang.NullPointerException on authentication to ldap.

IDP does not produce log entry nor error about missing KeyInfo entry in supplied Metadata

Create Spring initializing bean extension to allow customization of OpenSAML global security configuration

Wrong user is resolved with LDAP connector after authentication with help of UserPassword module

Default installation appears to create bad file link to login.config in handler.xml

2.4.0 snapshot install fails on certificate generation

Release preparation for 2.4.0

The Shibboleth provided default login page could be improved by incorporating a responsive design.

Review and update dependencies

Add option to omit NotBefore from assertion conditions

Windows installation script install.bat suggests Unix/Linux style name for installation directory

Test on Red Hat's openjdk 1.7

Build Window "Quick Installation" kit for IdP 2.4

add ability to get and display serviceName from taglib for anonymous metdata

Make Organization elements via taglib available to login page

Add nonce to IdP login default screen