Revision: 2074
Author: olavmrk
Date: Tue Jan 5 05:52:11 2010
Log: docs: Update documentation for assertion.encryption.
http://code.google.com/p/simplesamlphp/source/detail?r=2074
Modified:
/trunk/docs/simplesamlphp-reference-idp-hosted.txt
/trunk/docs/simplesamlphp-reference-idp-remote.txt
/trunk/docs/simplesamlphp-reference-sp-remote.txt
/trunk/modules/saml/docs/sp.txt
=======================================
--- /trunk/docs/simplesamlphp-reference-idp-hosted.txt Fri Oct 9 03:39:25
2009
+++ /trunk/docs/simplesamlphp-reference-idp-hosted.txt Tue Jan 5 05:52:11
2010
@@ -87,6 +87,12 @@
The following SAML 2.0 options are available:
+`assertion.encryption`
+: Whether assertions sent from this IdP should be encrypted. The default
+ value is `FALSE`.
+
+: Note that this option can be set for each SP in the SP-remote metadata.
+
`AttributeNameFormat`
: What value will be set in the Format field of attribute
statements. This parameter can be configured multiple places, and
=======================================
--- /trunk/docs/simplesamlphp-reference-idp-remote.txt Fri Oct 9 03:39:25
2009
+++ /trunk/docs/simplesamlphp-reference-idp-remote.txt Tue Jan 5 05:52:11
2010
@@ -92,7 +92,11 @@
There are two modes of encryption supported by simpleSAMLphp. One is
symmetric encryption, in which case both the SP and the IdP needs to share
a key. The other mode is the use of public key encryption. In that mode,
the public key of the SP is extracted from the certificate of the SP.
`assertion.encryption`
-: Whether assertions received from this IdP are encrypted. The default
value is `FALSE`.
+: Whether assertions received from this IdP must be encrypted. The
default value is `FALSE`.
+ If this option is set to `TRUE`, assertions from the IdP must be
encrypted.
+ Unencrypted assertions will be rejected.
+
+: Note that this option overrides the option with the same name in the
SP configuration.
`sharedkey`
: Symmetric key which should be used for decryption. This should be a
128-bit key. If this option is not specified, public key encryption will be
used instead.
=======================================
--- /trunk/docs/simplesamlphp-reference-sp-remote.txt Fri Oct 9 03:39:25
2009
+++ /trunk/docs/simplesamlphp-reference-sp-remote.txt Tue Jan 5 05:52:11
2010
@@ -215,6 +215,10 @@
: Whether assertions sent to this SP should be encrypted. The default
value is `FALSE`.
+: Note that this option also exists in the IdP-hosted metadata. This
+ entry in the SP-remote metadata overrides the option in the
+ IdP-hosted metadata.
+
`sharedkey`
: Symmetric key which should be used for encryption. This should be a
128-bit key. If this option is not specified, public key encryption
=======================================
--- /trunk/modules/saml/docs/sp.txt Thu Nov 26 01:18:04 2009
+++ /trunk/modules/saml/docs/sp.txt Tue Jan 5 05:52:11 2010
@@ -94,6 +94,14 @@
Options
-------
+`assertion.encryption`
+: Whether assertions received by this SP must be encrypted. The default
value is `FALSE`.
+ If this option is set to `TRUE`, unencrypted assertions will be
rejected.
+
+: Note that this option can be overridden for a specific IdP in
saml20-idp-remote.
+
+: *Note*: SAML 2 specific.
+
`AuthnContextClassRef`
: The SP can request authentication with a specific authentication
context class.
One example of usage could be if the IdP supports both
username/password authentication as well as software-PKI.
--
You received this message because you are subscribed to the Google Groups
"simpleSAMLphp commits" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/simplesamlphp-commits?hl=en.
