diff --git a/lib/SimpleSAML/Metadata/SAMLParser.php b/lib/SimpleSAML/Metadata/SAMLParser.php index 7955fba22f766cb78df09b7fa8179a42e3b7f8dc..82b912db46ebf1d6760604a17e5f15293266f5cb 100644 --- a/lib/SimpleSAML/Metadata/SAMLParser.php +++ b/lib/SimpleSAML/Metadata/SAMLParser.php @@ -1039,10 +1039,11 @@ class SimpleSAML_Metadata_SAMLParser if ($e instanceof SAML2_XML_mdrpi_RegistrationInfo) { - // Registration Authority cannot be overridden - if (isset($ret['RegistrationInfo']['registrationAuthority'])) { - SimpleSAML_Logger::debug('Invalid attempt to override registrationAuthority ' - . $ret['RegistrationInfo']['registrationAuthority'] . " with {$e->registrationAuthority}"); + // Registration Authority cannot be overridden (warn only if override attempts to change the value) + if (isset($ret['RegistrationInfo']['registrationAuthority']) + && $ret['RegistrationInfo']['registrationAuthority'] !== $e->registrationAuthority) { + SimpleSAML_Logger::warning('Invalid attempt to override registrationAuthority \'' + . $ret['RegistrationInfo']['registrationAuthority'] . "' with '{$e->registrationAuthority}'"); } else { $ret['RegistrationInfo']['registrationAuthority'] = $e->registrationAuthority; }