Closed SergK closed 4 months ago
https://github.com/DataShades/ckanext-saml2/blob/link-master/ckanext/saml2/plugin.py#L412 is expected to see email
in dict instead I have http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
ok, this issue was fixed by:
using custom claim rule
c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"]
=> issue(store = "Active Directory", types = ("email", "id", "name"), query = ";mail,sAMAccountName,sn;{0}", param = c.Value);
Adding email field. otherwise user creation will faile
data_dict['email'] = saml_info['email'][0]
https://github.com/DataShades/ckanext-saml2/blob/link-master/ckanext/saml2/plugin.py#L415
Hi,
Are there any documentation on how to integrate this plugin with ADFS server. I have an issue with endless loop, which looks like:
... ckan/user/login -> adfs -> ckan/user/logout -> adfs -> ...
I'm not the saml2 guru, probably some logs can help: