IdentityPython / SATOSA

Proxy translating between different authentication protocols (SAML2, OpenID Connect and OAuth2)
https://idpy.org
Apache License 2.0
197 stars 121 forks source link

Handle OIDC prompt together with SAML ForceAuthn and IsPassive #419

Closed melanger closed 1 month ago

melanger commented 1 year ago

Allow processing prompt=none/login/select_account/consent, ForceAuthn=true and IsPassive=true, including interoperability (e.g. IsPassive=true from SAML frontend is converted to prompt=none in OIDC backend)

Change is backward compatible considering nobody is using prompt and IsPassive on frontends or the constant Context.KEY_FORCE_AUTHN.

All Submissions: