...
Proposing to change default for idp.xml.strictEntityResolution from false to true (if we don’t just set it to true in 4.3)
Changed module behavior so idpnew files carry a -NNN extension with the new IdP version.
Programmer Visible (-api changes)
...
IdPAttribute#setValues() takes a List not a Collection (non-list deprecated since at least 4.1)Removal of joda-time and a few deprecated APIs that supported it. Major impact is use of DateTime for external authentication time signaling, and using the joda-time formatter string/class wiring up a DateAttributePredicate, usually part of expiring-password config.
Migration of net.shibboleth.utilities.java.support → net.shibboleth.shared
...