Work item search - Shibboleth Jira

IDP-2350

Consider new service to hold/configure credentials

Brent Putman

Scott Cantor

Minor

Unresolved

Jan 17, 2025, 2:53 PM

Feb 05, 2025, 9:24 PM

IDP-2328

Separate encryption/decryption and signing/validation in algorithm lists

Scott Cantor

Highest

Unresolved

Sep 23, 2024, 12:37 PM

IDP-2325

Algorithm control configuration needs to be better exposed

Brent Putman

Scott Cantor

Highest

Unresolved

Sep 20, 2024, 4:27 PM

Sep 23, 2024, 1:38 PM

IDP-2274

Unable to decrypt the Assertion when changing issuer for the AuthnRequest to the upstream IdP via RelyingPartyConfiguration

Brent Putman

Tomas Stenlund

Trivial

Fixed

Apr 03, 2024, 6:14 PM

Apr 11, 2024, 3:06 PM

IDP-2070

Ensure all uses of IdentifierGenerationStrategy are overrideable

Scott Cantor

Trivial

Won't Do

Feb 08, 2023, 3:28 PM

Feb 08, 2023, 6:35 PM

IDP-1956

authn fails: an SP rejects SHA1 and our IdP produces a response with SHA1 digest

Unassigned

Paul Fardy

Trivial

Invalid

May 31, 2022, 7:31 PM

May 31, 2022, 9:46 PM

IDP-1935

SAML2 Auth flow fails to decrypt when using overridden responder id.

Scott Cantor

Janne Lauros

Trivial

Fixed

Apr 05, 2022, 4:55 PM

Jul 29, 2023, 4:25 AM

IDP-1885

Use constant time algorithm for comparing CSRF tokens

Philip Smart

Trivial

Unresolved

Dec 03, 2021, 10:39 AM

Oct 10, 2022, 6:09 PM

IDP-1824

Conditionalize NameID encryption on format

Scott Cantor

Major

Done

May 24, 2021, 6:47 PM

Jun 16, 2021, 7:15 PM

IDP-1609

Issues using certificates with multple Subject Alternate Names in Jetty

Rod Widdowson

Matthew Slowe

Major

Fixed

May 18, 2020, 2:41 PM

May 27, 2020, 9:25 AM

IDP-1526

Changes to profile and algorithm defaults

Tom Zeller

Scott Cantor

Major

Completed

Dec 23, 2019, 6:47 PM

Mar 11, 2020, 2:10 PM

IDP-1474

Metadata filter for algorithm support extension

Scott Cantor

Major

Fixed

Jun 27, 2019, 1:23 PM

Mar 11, 2020, 2:10 PM

IDP-1442

Allow request signatures to be ignored

Scott Cantor

Major

Fixed

Apr 16, 2019, 10:11 PM

Mar 11, 2020, 2:10 PM

IDP-1422

Error creating bean with name 'proxyHttpSecurity'

Unassigned

bmathis@pima.edu

Minor

Won't Fix

Feb 18, 2019, 6:10 PM

Apr 16, 2020, 6:16 PM

IDP-1302

Logout flow resolving encryption keys too aggressively

Scott Cantor

Major

Fixed

Jun 19, 2018, 8:03 PM

Oct 10, 2018, 3:12 PM

IDP-1282

Update Bouncy Castle to 1.59

Tom Zeller

Minor

Fixed

May 03, 2018, 8:04 PM

Sep 12, 2018, 12:40 AM

IDP-1275

Deferred decryption of private key

Scott Cantor

Major

Fixed

Apr 13, 2018, 3:49 PM

Oct 10, 2018, 3:12 PM

IDP-1254

Log output on failure to find encryption key should be clearer.

Scott Cantor

Trivial

Fixed

Feb 07, 2018, 4:45 PM

Mar 24, 2021, 3:41 PM

IDP-1189

Increase default setKeySize to 3072 in Class SelfSignedCertificateGeneratorTask ?

Rod Widdowson

Thomas Lenggenhager

Major

Fixed

Jun 13, 2017, 1:44 PM

Oct 10, 2018, 2:01 PM

IDP-1180

MessageReplay Storage Failures

Scott Cantor

Aaron Howell

Minor

Fixed

May 23, 2017, 6:49 AM

Aug 06, 2021, 10:05 PM

IDP-1084

Make wiring of custom KeyInfo generation easier

Scott Cantor

Brent Putman

Minor

Done

Nov 09, 2016, 8:54 PM

Mar 24, 2021, 3:41 PM

IDP-1073

Factory beans for easier handling of simple trust scenarios.

Scott Cantor

Major

Fixed

Oct 24, 2016, 7:56 PM

Nov 11, 2016, 12:29 AM

IDP-932

Typo in documented trust engine bean name

Scott Cantor

Trivial

Fixed

Feb 29, 2016, 5:22 PM

Nov 11, 2016, 12:29 AM

IDP-893

BasicResourceCredentialFactoryBean does not honor all Resource object types

Rod Widdowson

Misagh Moayyed

Minor

Fixed

Dec 29, 2015, 7:32 AM

Nov 11, 2016, 12:24 AM

IDP-702

create a property that toggles signing requirement for received <LogoutRequest>

Scott Cantor

scott.koranda@ligo.org

Minor

Fixed

Apr 17, 2015, 1:36 AM

Jun 22, 2021, 10:53 PM

IDP-623

Deprecated type of credentials in provided sample LDAP config

Scott Cantor

Vlad Mencl

Trivial

Fixed

Feb 24, 2015, 11:25 PM

Jun 22, 2021, 6:44 PM

IDP-620

Signature Chaining Trust Engine parser mishandles <TrustEngineRef> elements

Rod Widdowson

Blocker

Fixed

Feb 22, 2015, 2:45 PM

May 06, 2015, 1:05 AM

IDP-595

The WantAssertionsSigned SP metadata flag is not honored.

Scott Cantor

Major

Fixed

Feb 06, 2015, 1:28 AM

May 10, 2015, 8:22 PM

IDP-534

Security-related *ConfigurationLookupFunctions are returning configs in the wrong order

Brent Putman

Blocker

Fixed

Dec 09, 2014, 2:31 AM

Dec 10, 2014, 10:04 PM

IDP-448

Signable Configuration for the IdP

Rod Widdowson

Minor

Won't Do

Jul 21, 2014, 2:57 PM

Jun 22, 2020, 2:26 PM

IDP-440

Extend certificate tool or create a separate way to generate the JCEKS symmetric keystore.

Scott Cantor

Major

Fixed

Jul 10, 2014, 4:58 PM

Sep 19, 2014, 3:29 AM

IDP-416

Add profile actions to set MessageChannelSecurityContext and fix up related code

Scott Cantor

Blocker

Fixed

Jun 02, 2014, 10:14 PM

Jul 09, 2014, 2:58 PM

IDP-415

Implement machinery for session key generation

Scott Cantor

Major

Fixed

Jun 02, 2014, 5:29 PM

Jul 17, 2014, 11:31 PM

IDP-414

Implement machinery for channel binding extension

Scott Cantor

Major

Fixed

Jun 02, 2014, 5:27 PM

Jul 17, 2014, 4:15 PM

IDP-410

Port self signed certificate creation to v3

Rod Widdowson

Tom Zeller

Minor

Fixed

May 22, 2014, 5:09 PM

Sep 19, 2014, 8:22 AM

IDP-396

Missing documentation for <Credential> types

Rod Widdowson

Major

Won't Fix

Apr 21, 2014, 1:39 PM

Jun 22, 2021, 6:41 PM

IDP-272

Port IdPV2 CryptoTransientIdAttributeDefinition to V3 APIs

Rod Widdowson

Blocker

Fixed

Feb 28, 2013, 4:53 PM

Mar 06, 2013, 2:50 PM

IDP-190

Create action that encrypts outbound assertions

Scott Cantor

Tom Zeller

Blocker

Fixed

Jul 01, 2012, 2:07 PM

Jul 09, 2014, 3:04 PM

IDP-189

Create action that encrypts NameIDs

Scott Cantor

Tom Zeller

Blocker

Fixed

Jul 01, 2012, 2:05 PM

Jul 09, 2014, 3:04 PM

IDP-188

Create action that encrypts attributes

Scott Cantor

Tom Zeller

Blocker

Fixed

Jul 01, 2012, 2:03 PM

Jul 09, 2014, 3:04 PM

IDP-187

Create action that determines encryption configuration to use in response generation

Scott Cantor

Tom Zeller

Blocker

Fixed

Jul 01, 2012, 2:01 PM

Jul 09, 2014, 3:04 PM

IDP-184

Create action that determines response signature configuration

Scott Cantor

Tom Zeller

Blocker

Fixed

Jul 01, 2012, 1:55 PM

Jul 18, 2014, 8:05 PM

IDP-178

Create action that ensures a message is not being replayed

Scott Cantor

Tom Zeller

Blocker

Fixed

Jul 01, 2012, 1:29 PM

Jul 12, 2023, 12:55 PM

IDP-177

Create action that ensures that a message is not stale

Scott Cantor

Tom Zeller

Blocker

Fixed

Jul 01, 2012, 1:24 PM

Jul 09, 2014, 3:04 PM

IDP-139

Create a SAML 2 profile workflow action that decrypts incoming Subject name identifier

Scott Cantor

Tom Zeller

Blocker

Fixed

Sep 09, 2011, 3:50 PM

Jul 09, 2014, 3:04 PM

IDP-138

Create SAML 2 profile workflow action that decrypts attributes in incoming request

Scott Cantor

Tom Zeller

Blocker

Fixed

Sep 09, 2011, 3:48 PM

Jul 09, 2014, 3:04 PM

IDP-87

Expose security algorithms as configurable properties

Scott Cantor

Blocker

Fixed

Apr 16, 2011, 1:14 PM

Sep 18, 2014, 7:38 PM

IDP-86

Allow restrictions on signing/digest algorithms to accept.

Brent Putman

Scott Cantor

Blocker

Fixed

Apr 16, 2011, 1:13 PM

Jul 18, 2014, 2:22 PM

IDP-82

Support for EncryptionMethod in metadata

Scott Cantor

Blocker

Duplicate

Apr 16, 2011, 1:11 PM

Jul 09, 2014, 3:20 PM

IDP-76

Consider changing the default signAssertions setting for the SAML2AttributeQueryProfile

Scott Cantor

Former user(Deactivated)

Minor

Fixed

Apr 16, 2011, 1:08 PM

Dec 10, 2014, 4:47 AM

Work	Assignee	Reporter	Priority	Resolution	Created	Updated
IDP-2350 Consider new service to hold/configure credentials	Brent Putman	Scott Cantor	Minor	Unresolved	Jan 17, 2025, 2:53 PM	Feb 05, 2025, 9:24 PM
IDP-2328 Separate encryption/decryption and signing/validation in algorithm lists	Scott Cantor	Scott Cantor	Highest	Unresolved	Sep 23, 2024, 12:37 PM	Sep 23, 2024, 12:37 PM
IDP-2325 Algorithm control configuration needs to be better exposed	Brent Putman	Scott Cantor	Highest	Unresolved	Sep 20, 2024, 4:27 PM	Sep 23, 2024, 1:38 PM
IDP-2274 Unable to decrypt the Assertion when changing issuer for the AuthnRequest to the upstream IdP via RelyingPartyConfiguration	Brent Putman	Tomas Stenlund	Trivial	Fixed	Apr 03, 2024, 6:14 PM	Apr 11, 2024, 3:06 PM
IDP-2070 Ensure all uses of IdentifierGenerationStrategy are overrideable	Scott Cantor	Scott Cantor	Trivial	Won't Do	Feb 08, 2023, 3:28 PM	Feb 08, 2023, 6:35 PM
IDP-1956 authn fails: an SP rejects SHA1 and our IdP produces a response with SHA1 digest	Unassigned	Paul Fardy	Trivial	Invalid	May 31, 2022, 7:31 PM	May 31, 2022, 9:46 PM
IDP-1935 SAML2 Auth flow fails to decrypt when using overridden responder id.	Scott Cantor	Janne Lauros	Trivial	Fixed	Apr 05, 2022, 4:55 PM	Jul 29, 2023, 4:25 AM
IDP-1885 Use constant time algorithm for comparing CSRF tokens	Philip Smart	Philip Smart	Trivial	Unresolved	Dec 03, 2021, 10:39 AM	Oct 10, 2022, 6:09 PM
IDP-1824 Conditionalize NameID encryption on format	Scott Cantor	Scott Cantor	Major	Done	May 24, 2021, 6:47 PM	Jun 16, 2021, 7:15 PM
IDP-1609 Issues using certificates with multple Subject Alternate Names in Jetty	Rod Widdowson	Matthew Slowe	Major	Fixed	May 18, 2020, 2:41 PM	May 27, 2020, 9:25 AM
IDP-1526 Changes to profile and algorithm defaults	Tom Zeller	Scott Cantor	Major	Completed	Dec 23, 2019, 6:47 PM	Mar 11, 2020, 2:10 PM
IDP-1474 Metadata filter for algorithm support extension	Scott Cantor	Scott Cantor	Major	Fixed	Jun 27, 2019, 1:23 PM	Mar 11, 2020, 2:10 PM
IDP-1442 Allow request signatures to be ignored	Scott Cantor	Scott Cantor	Major	Fixed	Apr 16, 2019, 10:11 PM	Mar 11, 2020, 2:10 PM
IDP-1422 Error creating bean with name 'proxyHttpSecurity'	Unassigned	bmathis@pima.edu	Minor	Won't Fix	Feb 18, 2019, 6:10 PM	Apr 16, 2020, 6:16 PM
IDP-1302 Logout flow resolving encryption keys too aggressively	Scott Cantor	Scott Cantor	Major	Fixed	Jun 19, 2018, 8:03 PM	Oct 10, 2018, 3:12 PM
IDP-1282 Update Bouncy Castle to 1.59	Tom Zeller	Tom Zeller	Minor	Fixed	May 03, 2018, 8:04 PM	Sep 12, 2018, 12:40 AM
IDP-1275 Deferred decryption of private key	Scott Cantor	Scott Cantor	Major	Fixed	Apr 13, 2018, 3:49 PM	Oct 10, 2018, 3:12 PM
IDP-1254 Log output on failure to find encryption key should be clearer.	Scott Cantor	Scott Cantor	Trivial	Fixed	Feb 07, 2018, 4:45 PM	Mar 24, 2021, 3:41 PM
IDP-1189 Increase default setKeySize to 3072 in Class SelfSignedCertificateGeneratorTask ?	Rod Widdowson	Thomas Lenggenhager	Major	Fixed	Jun 13, 2017, 1:44 PM	Oct 10, 2018, 2:01 PM
IDP-1180 MessageReplay Storage Failures	Scott Cantor	Aaron Howell	Minor	Fixed	May 23, 2017, 6:49 AM	Aug 06, 2021, 10:05 PM
IDP-1084 Make wiring of custom KeyInfo generation easier	Scott Cantor	Brent Putman	Minor	Done	Nov 09, 2016, 8:54 PM	Mar 24, 2021, 3:41 PM
IDP-1073 Factory beans for easier handling of simple trust scenarios.	Scott Cantor	Scott Cantor	Major	Fixed	Oct 24, 2016, 7:56 PM	Nov 11, 2016, 12:29 AM
IDP-932 Typo in documented trust engine bean name	Scott Cantor	Scott Cantor	Trivial	Fixed	Feb 29, 2016, 5:22 PM	Nov 11, 2016, 12:29 AM
IDP-893 BasicResourceCredentialFactoryBean does not honor all Resource object types	Rod Widdowson	Misagh Moayyed	Minor	Fixed	Dec 29, 2015, 7:32 AM	Nov 11, 2016, 12:24 AM
IDP-702 create a property that toggles signing requirement for received <LogoutRequest>	Scott Cantor	scott.koranda@ligo.org	Minor	Fixed	Apr 17, 2015, 1:36 AM	Jun 22, 2021, 10:53 PM
IDP-623 Deprecated type of credentials in provided sample LDAP config	Scott Cantor	Vlad Mencl	Trivial	Fixed	Feb 24, 2015, 11:25 PM	Jun 22, 2021, 6:44 PM
IDP-620 Signature Chaining Trust Engine parser mishandles <TrustEngineRef> elements	Rod Widdowson	Rod Widdowson	Blocker	Fixed	Feb 22, 2015, 2:45 PM	May 06, 2015, 1:05 AM
IDP-595 The WantAssertionsSigned SP metadata flag is not honored.	Scott Cantor	Scott Cantor	Major	Fixed	Feb 06, 2015, 1:28 AM	May 10, 2015, 8:22 PM
IDP-534 Security-related *ConfigurationLookupFunctions are returning configs in the wrong order	Brent Putman	Brent Putman	Blocker	Fixed	Dec 09, 2014, 2:31 AM	Dec 10, 2014, 10:04 PM
IDP-448 Signable Configuration for the IdP	Rod Widdowson	Rod Widdowson	Minor	Won't Do	Jul 21, 2014, 2:57 PM	Jun 22, 2020, 2:26 PM
IDP-440 Extend certificate tool or create a separate way to generate the JCEKS symmetric keystore.	Scott Cantor	Scott Cantor	Major	Fixed	Jul 10, 2014, 4:58 PM	Sep 19, 2014, 3:29 AM
IDP-416 Add profile actions to set MessageChannelSecurityContext and fix up related code	Scott Cantor	Scott Cantor	Blocker	Fixed	Jun 02, 2014, 10:14 PM	Jul 09, 2014, 2:58 PM
IDP-415 Implement machinery for session key generation	Scott Cantor	Scott Cantor	Major	Fixed	Jun 02, 2014, 5:29 PM	Jul 17, 2014, 11:31 PM
IDP-414 Implement machinery for channel binding extension	Scott Cantor	Scott Cantor	Major	Fixed	Jun 02, 2014, 5:27 PM	Jul 17, 2014, 4:15 PM
IDP-410 Port self signed certificate creation to v3	Rod Widdowson	Tom Zeller	Minor	Fixed	May 22, 2014, 5:09 PM	Sep 19, 2014, 8:22 AM
IDP-396 Missing documentation for <Credential> types	Rod Widdowson	Rod Widdowson	Major	Won't Fix	Apr 21, 2014, 1:39 PM	Jun 22, 2021, 6:41 PM
IDP-272 Port IdPV2 CryptoTransientIdAttributeDefinition to V3 APIs	Rod Widdowson	Rod Widdowson	Blocker	Fixed	Feb 28, 2013, 4:53 PM	Mar 06, 2013, 2:50 PM
IDP-190 Create action that encrypts outbound assertions	Scott Cantor	Tom Zeller	Blocker	Fixed	Jul 01, 2012, 2:07 PM	Jul 09, 2014, 3:04 PM
IDP-189 Create action that encrypts NameIDs	Scott Cantor	Tom Zeller	Blocker	Fixed	Jul 01, 2012, 2:05 PM	Jul 09, 2014, 3:04 PM
IDP-188 Create action that encrypts attributes	Scott Cantor	Tom Zeller	Blocker	Fixed	Jul 01, 2012, 2:03 PM	Jul 09, 2014, 3:04 PM
IDP-187 Create action that determines encryption configuration to use in response generation	Scott Cantor	Tom Zeller	Blocker	Fixed	Jul 01, 2012, 2:01 PM	Jul 09, 2014, 3:04 PM
IDP-184 Create action that determines response signature configuration	Scott Cantor	Tom Zeller	Blocker	Fixed	Jul 01, 2012, 1:55 PM	Jul 18, 2014, 8:05 PM
IDP-178 Create action that ensures a message is not being replayed	Scott Cantor	Tom Zeller	Blocker	Fixed	Jul 01, 2012, 1:29 PM	Jul 12, 2023, 12:55 PM
IDP-177 Create action that ensures that a message is not stale	Scott Cantor	Tom Zeller	Blocker	Fixed	Jul 01, 2012, 1:24 PM	Jul 09, 2014, 3:04 PM
IDP-139 Create a SAML 2 profile workflow action that decrypts incoming Subject name identifier	Scott Cantor	Tom Zeller	Blocker	Fixed	Sep 09, 2011, 3:50 PM	Jul 09, 2014, 3:04 PM
IDP-138 Create SAML 2 profile workflow action that decrypts attributes in incoming request	Scott Cantor	Tom Zeller	Blocker	Fixed	Sep 09, 2011, 3:48 PM	Jul 09, 2014, 3:04 PM
IDP-87 Expose security algorithms as configurable properties	Scott Cantor	Scott Cantor	Blocker	Fixed	Apr 16, 2011, 1:14 PM	Sep 18, 2014, 7:38 PM
IDP-86 Allow restrictions on signing/digest algorithms to accept.	Brent Putman	Scott Cantor	Blocker	Fixed	Apr 16, 2011, 1:13 PM	Jul 18, 2014, 2:22 PM
IDP-82 Support for EncryptionMethod in metadata	Scott Cantor	Scott Cantor	Blocker	Duplicate	Apr 16, 2011, 1:11 PM	Jul 09, 2014, 3:20 PM
IDP-76 Consider changing the default signAssertions setting for the SAML2AttributeQueryProfile	Scott Cantor	Former user(Deactivated)	Minor	Fixed	Apr 16, 2011, 1:08 PM	Dec 10, 2014, 4:47 AM

All work