All work

Split off secrets into separate property file

TestNG @BeforeTest and @AfterTest are being misused

Avoid object creation in the external web flows

Metadata container doesn't have ApplicationContext set

Spring context reloads failing on parent beans property type conversions

Authentication finalize action fails to overwrite previous active flow result

RuntimeException when using CAS and consent

CAS: Unicode SMP characters cause invalid XML

CAS actions should avoid raising runtime exceptions

Attaching SPProvidedID to persistent NameID uses incorrect SQL statement

Attribute Release view: display relying party's OrganizationDisplayName instead OrganizationName

attribute-release does not comply to isPassive flag

Logout flow resolving encryption keys too aggressively

"illegal reflective access" under Java 9, 10, 11

NULLs in idp.process.log with LDAP authn against ActiveDirectory

Dependencies of disabled plugins should be exposed

donotcache ignored on forceauthn

Logout templates lacking rpUIContext for initiating SP

x509-prompt.jsp links to SHIB2 document

Clicking login button twice generates NoSuchFlowExecutionException error

Unnecessary injection of LDAP search filter in LDAPDataConnector

Remote User Subject Attribute Logging

ToU consent broken in combination with multiple languages

Global transitions are inherited into subflows

NameID comparison in logout code may be overly strict

Runtime flow exceptions are insufficiently logged

Unconstrained flow transitions considered harmful.

Intermittent Assertion signature with IdP-initiated SSO

RP mdui DisplayName only shows when at least one letter is uppercase

StorageBackedIdPSessionSerializer is slow under heavy load

Kerberos failed password elevate exception to classified

Jetty config installed with MSI Installer

Async LogoutRequest fails with EncryptedID

String attribute type incompatibility in Scripted attributes on Java7

HTTP metadata resolver XML config schema and parsers should support more HttpClient config options

Remove property for LDAP resolver return attributes

Error when removing the salt from the storedID DataConnector - can't generate random persistentID

Make HTMLLocalStorage key configurable

BaseComputedIDDataConnectorParser logs secret - should it?

IdentifiableBeanPostProcessor not running in SWF contexts

NameIDFormat Generation in Default Metadata

CAS Gateway Throws java.lang.IllegalStateException: Cannot find authentication results in IdP session

Installer requires entityID in idp.merge.properties in non-interactive mode

default idp.properties is missing idp.fticks.loghost + idp.fticks.logport

RDBMSDataConnector defaults to readOnly connections

Spelling misstake in web.xml

Logout flow views still susceptible to NullPointerException in Request.getContextPath

NullPointerException in JDBCPersistentIdStoreEx when MySQL is busy

ExternalAuthentication ignores authnInstant