Skip to content

Bugfix/nameid policy#2603

Merged
monkeyiq merged 4 commits intosimplesamlphp-2.5from
bugfix/nameid-policy
Mar 5, 2026
Merged

Bugfix/nameid policy#2603
monkeyiq merged 4 commits intosimplesamlphp-2.5from
bugfix/nameid-policy

Conversation

@tvdijen
Copy link
Copy Markdown
Member

@tvdijen tvdijen commented Feb 28, 2026

Closes #2602

@ghalse Your review is also appreciated!

@tvdijen tvdijen requested a review from monkeyiq February 28, 2026 23:56
@tvdijen tvdijen changed the base branch from master to simplesamlphp-2.5 February 28, 2026 23:56
@tvdijen tvdijen force-pushed the simplesamlphp-2.5 branch from d380e5a to e0d2141 Compare March 2, 2026 20:49
monkeyiq added 3 commits March 5, 2026 10:16
I also kept a reference to the errata 05 page/line here in a comment
As the default was true for this before it is now that way again. If
the format is NAMEID_TRANSIENT it will be set to respect the Errata 05.
@monkeyiq monkeyiq merged commit 76cee4a into simplesamlphp-2.5 Mar 5, 2026
33 of 34 checks passed
monkeyiq added a commit that referenced this pull request Mar 5, 2026
* Bugfix: don't set illegal combination of AllowCreate/Format

* Force allowCreate to false if format is TRANSIENT

I also kept a reference to the errata 05 page/line here in a comment

* allowCreate is true by default and contained for TRANSIENT

As the default was true for this before it is now that way again. If
the format is NAMEID_TRANSIENT it will be set to respect the Errata 05.

* The persistent default is back to having allowCreate=true

---------

Co-authored-by: Ben Martin <monkeyiq@users.sourceforge.net>
@tvdijen tvdijen deleted the bugfix/nameid-policy branch March 5, 2026 13:39
tvdijen added a commit that referenced this pull request Mar 5, 2026
* Bugfix: don't set illegal combination of AllowCreate/Format

* Force allowCreate to false if format is TRANSIENT

I also kept a reference to the errata 05 page/line here in a comment

* allowCreate is true by default and contained for TRANSIENT

As the default was true for this before it is now that way again. If
the format is NAMEID_TRANSIENT it will be set to respect the Errata 05.

* The persistent default is back to having allowCreate=true

---------

Co-authored-by: Ben Martin <monkeyiq@users.sourceforge.net>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

NameIDPolicy with a transient name identifer have allowCreate set

3 participants