From 26b341a2765aabbe9d90caf956a3bcaaba8b6dd1 Mon Sep 17 00:00:00 2001 From: Benjamin Dauvergne Date: Thu, 22 Dec 2011 18:19:29 +0100 Subject: [PATCH] [id-ff 1.2] provision the SessionIndex into the assertions Without it SLO session management is broken. --- lasso/id-ff/login.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/lasso/id-ff/login.c b/lasso/id-ff/login.c index dd3cc5c7..c20b4b5d 100644 --- a/lasso/id-ff/login.c +++ b/lasso/id-ff/login.c @@ -401,6 +401,12 @@ lasso_login_build_assertion(LassoLogin *login, } } + /* add session index */ + if (lasso_provider_get_first_http_method(&login->parent.server->parent, + provider, LASSO_MD_PROTOCOL_TYPE_SINGLE_LOGOUT) != LASSO_HTTP_METHOD_NONE) { + lasso_assign_string(as->SessionIndex, assertion->AssertionID); + } + assertion->AuthenticationStatement = LASSO_SAML_AUTHENTICATION_STATEMENT(as); /* Save signing material in assertion private datas to be able to sign later */