-
After upgrading Apereo CAS at our university to version 6.5.8 of cas-overlay, python-cas stopped working.
Verification of tickets CASClientWithSAMLV1 fails, server logs reveal that the CAS is unabl…
-
### Description
---
With more and more companies implementing SAML into their systems to provide end users more login options to their systems. Additional SAML related vulnerabilities should be cons…
-
It looks like this library, when signing, will find the first Signature and compute the Digest/Signature values for that. Is it possible to use this library also when you want to sign both the Message…
-
### Describe the Bug
I have configured Directus with SAML SSO with Okta
The auth flow is initiated from Directus but throws unexpected error upon receiving SAML Response
Error:
```
[06:44:05.272]…
-
Do you sign the assertion for every request to API server? Since oauth token is good for an hour, should there be a SAML request with every CAD api request?
-
Hey,
I am looking a solution for idle timeout between Browser (or SP) and IDP.
**Scenario is as below :**
1. User login to Application and got valid assertion for 12 hours from IDP.
2. User is…
SoodS updated
4 years ago
-
I tested this against [SSOCircle's Public IDP](http://www.ssocircle.com/en/portfolio/publicidp/) and I received the error `SAML must contain one assertion`.
I captured the POST and am attaching it …
-
In 5.5, a change was made to disallow decryption unless the SAML 2.0 response is signed. Since this is a breaking change, we should have some documentation that shows how to restore the previous behav…
-
**Expected Behavior**
Username (in the sense of Principal Name) can be released by IdP AuthnRequest's Assertion in NameID element or one of the Attribute element instead. NameID, if present (as it …
-
**Describe the bug**
When connected to a Shibboleth IdP (not sure yet if applicable for all Shibboleth IdPs or only this specific one), the signature validation fails.
After reading the source cod…