A request from an SP with an override to the default policy (eg. encrypt_assertion: false) will cause the override to be present in the default policy for later requests without an override. This is because the code updates a reference to the default policy dict here: https://github.com/IdentityPython/SATOSA/blob/master/src/satosa/frontends/saml2.py#L399
A possible fix would be to add .copy() on line 398: sp_policy = policies.get('default', {}).copy() so the default policy is not mutated later.
A request from an SP with an override to the default policy (eg.
encrypt_assertion: false) will cause the override to be present in the default policy for later requests without an override. This is because the code updates a reference to the default policy dict here: https://github.com/IdentityPython/SATOSA/blob/master/src/satosa/frontends/saml2.py#L399A possible fix would be to add
.copy()on line 398:sp_policy = policies.get('default', {}).copy()so the default policy is not mutated later.