Release Notes › Federation Security Services Release Notes › Fixes in r12 SP1 and SP2

Fixes in r12 SP1 and SP2

This section contains the following topics:

SAML 2.0 Autopost Forms No Longer Require JavaScript (73858, 83123)

SAML 2.0 Error Message For SSO Service Too Detailed (74355, 83122)

Authentication URL Open to Malicious Attacks (74278, 76976, 83114, 83117)

Session Cookie not Marked Secure by the Assertion Consumer Service (74449, 83124)

Web Agent Option Pack Fails when TRANSIENTIP Checking is Enabled (75240, 83125)

Wrong Private Key is Used to Sign Assertions (76161, 83118)

NameID in Assertion Had the Wrong Format (76311, 83119)

Session Server Error When Assertion Attribute Value is Blank or NULL (76985, 83120, 83703)

SLO Logout Response Has Incorrect Destination Value (77359, 83121)

SiteMinder Cannot Process Multi-valued Attributes from an Assertion (77883, 80490, 83115)

Error Occurs If User is Not in the First Listed User Directory (78618, 83531)