Shibboleth IdP从v3升级至v4时SAML响应异常求助

问题描述 #

我们正在执行Shibboleth IdP从版本3到版本4的升级操作，修改配置文件后出现SAML响应异常，页面显示“Uncaught Exception”错误。

错误日志 #

2024-07-29 12:50:12,576 - 127.0.0.1 - ERROR [net.shibboleth.idp.saml.profile:39] - Uncaught runtime exception
org.springframework.binding.expression.EvaluationException: An ELException occurred getting the value for expression 'PopulateBindingAndEndpointContexts' on context [class org.springframework.webflow.engine.impl.RequestControlContextImpl]
    at org.springframework.binding.expression.spel.SpringELExpression.getValue(SpringELExpression.java:104)
Caused by: org.springframework.expression.spel.SpelEvaluationException: EL1021E: A problem occurred whilst attempting to access the property 'PopulateBindingAndEndpointContexts': 'Error creating bean with name 'PopulateBindingAndEndpointContexts' defined in class path resource [net/shibboleth/idp/flows/saml/saml-abstract-beans.xml]: Initialization of bean failed; nested exception is org.springframework.beans.TypeMismatchException: Failed to convert property value of type 'java.lang.String' to required type 'boolean' for property 'artifactImpliesSecureChannel'; nested exception is java.lang.IllegalArgumentException: Invalid boolean value [yourSecureChannel]'
    at org.springframework.expression.spel.ast.PropertyOrFieldReference.readProperty(PropertyOrFieldReference.java:215)
Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'PopulateBindingAndEndpointContexts' defined in class path resource [net/shibboleth/idp/flows/saml/saml-abstract-beans.xml]: Initialization of bean failed; nested exception is org.springframework.beans.TypeMismatchException: Failed to convert property value of type 'java.lang.String' to required type 'boolean' for property 'artifactImpliesSecureChannel'; nested exception is java.lang.IllegalArgumentException: Invalid boolean value [yourSecureChannel]
    at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:628)
Caused by: org.springframework.beans.TypeMismatchException: Failed to convert property value of type 'java.lang.String' to required type 'boolean' for property 'artifactImpliesSecureChannel'; nested exception is java.lang.IllegalArgumentException: Invalid boolean value [yourSecureChannel]
    at org.springframework.beans.AbstractNestablePropertyAccessor.convertIfNecessary(AbstractNestablePropertyAccessor.java:600)
Caused by: java.lang.IllegalArgumentException: Invalid boolean value [yourSecureChannel]
    at org.springframework.beans.propertyeditors.CustomBooleanEditor.setAsText(CustomBooleanEditor.java:154)

背景与诉求 #

我们已针对v3到v4的升级要求修改了Shibboleth IdP配置文件，目标是让IdP能够合规处理SAML请求并生成有效响应，确保用户认证及SSO功能正常运行。但目前因PopulateBindingAndEndpointContexts Bean的运行时初始化异常，导致IdP无法生成预期的SAML响应，现寻求技术支持解决该问题。

内容的提问来源于stack exchange，提问作者Sairam Guttula