OPENAM-9919 Fix Proxy For Encrypted Assertions

OPENAM-9290 Allow SAML response to be sent if NameIDPolicy is empty

OPENAM-8580 OpenAM should allow to use objectGUID value from AD when working with persistent NameID

OPENAM-6315 Proxying SAML2 Second level status code

OPENAM-6974 SAML federation failover issue

OPENAM-8192 Pass SAML2EventLogger to IDPProxyUtil

OPENAM-8192 Pass SAML2EventLogger to IDPProxyUtil

TEMPER-43 Use TimeService throughout OpenAM.

Revert time travel

TEMPER-43 Use TimeService throughout AM

[AME-7525] Added access audit logging to saml 2 sp and idp access points

AME-7905 - Refactor SAML code base AME-8078 - SAML2 Authentication Module AME-8598 - SAML2 AuthModule: Code Review Large Commit covering the work on the SAML2 refactor and authentication module. More detail on the individual commits is preservered in the branch feature/AME-8078-saml2-authentication-module on the fork repository openam-newton

Merge with trunk

Fix for OPENAM-6196, review CR-8146 - review cases where response.getOutputStream() and response.getWriter() were both being called (which is not supported) and make the use of an existing Writer instance more consistent.

OPENAM-6318 CR-7559 Include AuthenticatingAuthority in IdP proxy responses

OPENAM-3470 CR-6948 Provide control over NameID persistence

OPENAM-5609 FR-636

OPENAM-5609 FR-636

OPENAM-5609 FR-636

OPENAM-5260 CR-5694 Allow only response to be signed when using HTTP POST binding

OPENAM-5260 CR-5694 Allow only response to be signed when using HTTP POST binding

OPENAM-5260 CR-5694 Allow only response to be signed when using HTTP POST binding

OPENAM-4248 CR-4284 Proxy NoPassive Responses in IdP Proxy setups

OPENAM-4248 CR-4284 Proxy NoPassive Responses in IdP Proxy setups

Fix for OPENAM-4264 - review: CR-4326 When spNameQualifier is not specified in the SAML AuthnRequest, the value should default to the recipientEntityID (remote SP's entity ID).

Fix for OPENAM-4264 - review: CR-4326 When spNameQualifier is not specified in the SAML AuthnRequest, the value should default to the recipientEntityID (remote SP's entity ID).

Fix for OPENAM-3519, review CR-3176 - remove dependency of openam-core from openam-federation-library

Backported fix for OPENAM-2327 to 11.0.x

AME-2227 (See AME-2706 for CR list) Resolved servlet and JSP violations.

Fix for OPENAM-3125, review CR-2461: IDPSSOUtil.getAssertion() is not thread-safe (additional fix against build error, ...my mistake)

Fix for OPENAM-3125, review CR-2461: IDPSSOUtil.getAssertion() is not thread-safe (additional fix against build error, ...my mistake)

Fix for OPENAM-3125, review CR-2461: IDPSSOUtil.getAssertion() is not thread-safe

Fix for OPENAM-3190 - review: FR-4 New extension point for IdPAdapter that makes it possible to modify the SAML response before it's sent out.

Fix for OPENAM-3190 - review: FR-4 New extension point for IdPAdapter that makes it possible to modify the SAML response before it's sent out.

OPENAM-3127 CR-2474 HTTP 500 error when spNameQualifier attribute is omitted (cherry picked from commit 7f621e5416481e8418b72cf8ef6f1920a35c43e9)

OPENAM-3127 CR-2474 HTTP 500 error when spNameQualifier attribute is omitted

Small fix-up for OPENAM-1180

Fix for OPENAM-1180 - review: CR-1957 The solution involved following changes: * changed the way the login URL is being saved for forwarded request, now we only save the forwarded request parameters, hence the originally used parameters (like SAMLRequest) are no longer saved * changed the SAML redirectAuthentication implementation to include some extra request parameters for the goto URL, this way we can ensure that we can send back a SAML error response to the SP even when the AuthnRequest is no longer available. * In case the AuthnRequest is not available (by any means) now we send back a SAML error response to the SP instead of showing an HTTP-500

Fix for OPENAM-2306 review CR-1445.

Fix for OPENAM-1819 - review: CR-853

Merging openam_10.1.0_AME-211 branch to trunk - Fix for AME-211

MAE-131/AME-192/AME-211 - CR-790. Session HA Failover and starting to refactor for use for SAML2 and OAUTH2 tokens as well.

AME-153 OPENAM-1623

Fix for OPENAM-1427

Moved Federation library source