SP does not decrypt responses from attribute response

Description

Attribute responses that contain encrypted assertions aren't properly decrypted and their attributes processed. It results in a log message "Shibboleth.AttributeResolver.Query [5]: response from attribute authority was empty"

Environment

None

Activity

Show:

ChadC November 10, 2009 at 1:05 PM
Edited

On the <ProfileConfiguration xsi:type="saml:SAML2AttributeQueryProfile"/>, in the relying-party.xml, change encryptAssertions to "always".

Scott Cantor November 10, 2009 at 12:59 PM

Can you briefly outline the config options used with the IdP so I can verify my fix?

Fixed
Pinned fields
Click on the next to a field label to start pinning.

Details

Assignee

Reporter

Fix versions

Affects versions

Created November 10, 2009 at 11:53 AM
Updated June 22, 2021 at 7:45 PM
Resolved November 10, 2009 at 1:41 PM