From fa8ae2c05122c59317d72fd66c53e2d945297297 Mon Sep 17 00:00:00 2001
From: chasegawa <chasegawa@unicon.net>
Date: Wed, 8 Jan 2025 11:02:19 -0700
Subject: [PATCH] SHIBUI-2646: fixes for MDQ when not using pac4j and entity
 ids have a slash in the id

---
 .../admin/ui/configuration/SpringSecurityConfig.java          | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/backend/src/main/java/edu/internet2/tier/shibboleth/admin/ui/configuration/SpringSecurityConfig.java b/backend/src/main/java/edu/internet2/tier/shibboleth/admin/ui/configuration/SpringSecurityConfig.java
index 2f6a82a82..ad34b277a 100644
--- a/backend/src/main/java/edu/internet2/tier/shibboleth/admin/ui/configuration/SpringSecurityConfig.java
+++ b/backend/src/main/java/edu/internet2/tier/shibboleth/admin/ui/configuration/SpringSecurityConfig.java
@@ -191,7 +191,9 @@ public WebSecurityCustomizer noAuthWebSecurityCustomizer() {
     }
 
     private HttpFirewall defaultFirewall() {
-        return new DefaultHttpFirewall();
+        DefaultHttpFirewall defaultFirewall = new DefaultHttpFirewall();
+        defaultFirewall.setAllowUrlEncodedSlash(true);
+        return defaultFirewall;
     }
 
     class SimpleAuthenticationProvider implements AuthenticationProvider {