From e0d99bde643bf452dd59111603dd0bf76af2d001 Mon Sep 17 00:00:00 2001
From: Hongchol Sinn <hongchol.sinn@broadcom.com>
Date: Thu, 28 Mar 2024 16:53:14 -0700
Subject: [PATCH] Set default SAML signatureAlgorithm value to SHA256

- For the bean.
- As suggested in review comments in https://github.com/cloudfoundry/uaa/pull/2794.
---
 uaa/src/main/webapp/WEB-INF/spring/saml-providers.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/uaa/src/main/webapp/WEB-INF/spring/saml-providers.xml b/uaa/src/main/webapp/WEB-INF/spring/saml-providers.xml
index f51367ac44c..83232f4ce57 100644
--- a/uaa/src/main/webapp/WEB-INF/spring/saml-providers.xml
+++ b/uaa/src/main/webapp/WEB-INF/spring/saml-providers.xml
@@ -302,7 +302,7 @@
     <bean id="fixedHttpMetaDataProvider" class="org.cloudfoundry.identity.uaa.provider.saml.FixedHttpMetaDataProvider" />
 
     <bean id="defaultSamlConfig" class="org.cloudfoundry.identity.uaa.provider.saml.SamlConfigurationBean">
-        <property name="signatureAlgorithm" value="${login.saml.signatureAlgorithm:SHA1}"/>
+        <property name="signatureAlgorithm" value="${login.saml.signatureAlgorithm:SHA256}"/>
     </bean>
 
     <beans profile="fileMetadata">