diff options
| author | Frederic Peters <fpeters@entrouvert.com> | 2008-02-25 13:01:34 +0000 |
|---|---|---|
| committer | Frederic Peters <fpeters@entrouvert.com> | 2008-02-25 13:01:34 +0000 |
| commit | 24c7d38abce697d33d2e9b4b7ed1f855875728e1 (patch) | |
| tree | 4df5a5515d745e520380b1400a68b0e3da10076a | |
| parent | 1b76f08b7a34b30ca6fbf25a08738296a5584175 (diff) | |
keep NameIdPolicy/Format in login->nameIDPolicy, as in ID-FF 1.2; use it not to
look for federations when transient is requested.
| -rw-r--r-- | lasso/saml-2.0/login.c | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/lasso/saml-2.0/login.c b/lasso/saml-2.0/login.c index 19b563e9..2684f837 100644 --- a/lasso/saml-2.0/login.c +++ b/lasso/saml-2.0/login.c @@ -538,6 +538,11 @@ lasso_saml20_login_process_federation(LassoLogin *login, gboolean is_consent_obt name_id_policy_format = LASSO_SAML2_NAME_IDENTIFIER_FORMAT_PERSISTENT; } + if (login->nameIDPolicy) { + g_free(login->nameIDPolicy); + } + login->nameIDPolicy = g_strdup(name_id_policy_format); + if (name_id_policy_format && strcmp(name_id_policy_format, LASSO_SAML2_NAME_IDENTIFIER_FORMAT_TRANSIENT) == 0) { return 0; @@ -730,7 +735,8 @@ lasso_saml20_login_build_assertion(LassoLogin *login, provider = g_hash_table_lookup(profile->server->providers, profile->remote_providerID); - if (profile->identity) { + if (profile->identity && strcmp(login->nameIDPolicy, + LASSO_SAML2_NAME_IDENTIFIER_FORMAT_TRANSIENT) != 0) { char *name_id_sp_name_qualifier; if (provider->private_data->affiliation_id) { name_id_sp_name_qualifier = provider->private_data->affiliation_id; |