The Shibboleth V2 IdP and SP software have reached End of Life and are no longer supported. This documentation is available for historical purposes only. See the IDP v4 and SP v3 wiki spaces for current documentation on the supported versions.

IdP Infocard cardspace issues

Vista and XP Cardspace issues

Early versions of Cardspace, such as those for XP and Vista, have an XML bug that requires a workaround at the IdP -- only if you care to work with them, of course.  You need:

  • A patched xml-security library. The patch allows an option to strip whitespace from xml signatures - a need of MicroSoft's CardSpace identity selector.  The patch, which uses a system property, org.apache.xml.security.ignoreLineBreaks=true, to activate the no-whitespace mode.  Later versions of the library support this property, but have a different and equally fatal reaction with the cardspace bug.
  • An additional property definition for tomcat's startup:
    JAVA_OPTS="$JAVA_OPTS \-Dorg.apache.xml.security.ignoreLineBreaks=true"