[WSS-586] Don't query a CallbackHandler for a secret key when parsing a SAML Subject for credentials

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.2.0
• Assignee: Colm O hEigeartaigh
• Reporter: Colm O hEigeartaigh
• Created: 24/Aug/16 16:07
• Updated: 01/Sep/17 15:05
• Resolved: 24/Aug/16 16:35

Description

Currently, we query a SAML CallbackHandler for a secret key when checking the SAML Assertion for Subject credentials. This is not really required by any of the standard use-cases, so this can be dropped for 2.2.0.