search

OTA-Insight / djangosaml2idp

SAML 2.0 Identity Provider in Django
Apache License 2.0
104 stars 96 forks source link

Improved PersistentId support to not depend on hash of email, or urls of service provider or identity provider #65

Closed askvortsov1 closed 4 years ago

askvortsov1 commented 4 years ago

The current system generates persistent ids from the default nameid (usually email), and SP and IdP entity ids (generally URLs). A user email, service provider url, or identity provider url might change over time. In the previous system, this would change the PersistendId, leading to possible account loss on the client side. By using a random uuid stored in the database, this risk is alleviated.

askvortsov1 commented 4 years ago

Fixed in favor of new PR to master