SAML KeyStoreManager OSGi @Reference has no default assignments

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 7.0.X
• Fix Version/s: 7.0.X, 7.1.X, 7.2.X, Master
• Component/s: Application Security > SAML
• Labels:
  • liferay-saml-2.0-provider-3.1.0
• Branch Version/s:
  7.2.x, 7.1.x, 7.0.x
• Backported to Branch:
  Committed
• Fix Priority: 5
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal-ee/pull/18218

Cannot be easily reproduced, the behaviour is random.

Root cause is that with no SamlKeyStoreManagerConfiguration configured (default behaviour), all OSGi @Reference for KeyStoreManager can reference any implementation available.

This leads to a random inconsistent state where some components reference Document Library implementation and other components reference File System implementation, loading and saving KeyStore from/to different locations, breaking many functionalities in SAML.