From 55e516f6bbe19f41c365a856c28c29b9797afe68 Mon Sep 17 00:00:00 2001
From: Olav Morken <olav.morken@uninett.no>
Date: Fri, 7 Aug 2009 11:15:23 +0000
Subject: [PATCH] idp/SSOService.php: Fix saving of NameID sent to SP.
git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1638 44740490-163a-0410-bde0-09ae8108e29a
---
www/saml2/idp/SSOService.php | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/www/saml2/idp/SSOService.php b/www/saml2/idp/SSOService.php
index dd1002ee8..31b140780 100644
--- a/www/saml2/idp/SSOService.php
+++ b/www/saml2/idp/SSOService.php
@@ -425,6 +425,10 @@ if($needAuth && !$isPassive) {
$assertion = sspmod_saml2_Message::buildAssertion($idpMetadata, $spMetadata, $attributes);
$assertion->setInResponseTo($requestID);
+ $nameId = $assertion->getNameId();
+ $nameId['value'] = $nameId['Value'];
+ $session->setSessionNameId('saml20-sp-remote', $spentityid, $nameId);
+
/* Maybe encrypt the assertion. */
$assertion = sspmod_saml2_Message::encryptAssertion($idpMetadata, $spMetadata, $assertion);
--
GitLab