[CXF-5906] Claim Manager only parses first claim value

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.7.11, 3.0.1
• Fix Version/s: 2.7.13, 3.0.2, 3.1
• Component/s: STS
• Labels: Claims STS
• Estimated Complexity: Unknown
• Assignee: Jan Bernhardt
• Reporter: Jan Bernhardt
• Created: 25/Jul/14 18:31
• Updated: 27/Apr/15 07:55
• Resolved: 26/Jul/14 08:01

Description

In case of claim mapping in a federation scenario the org.apache.cxf.sts.claims.ClaimManager parses the onBehalfOf token to detected source claims. The method parseClaimsInAssertion for SAML 1 & 2 token contains a bug by only copying the first claim value.
This error becomes visible for example for role claims with multliple values.