search

OpenConext / OpenConext-oidcng

OpenID Connect gateway - The Next Generation
3 stars 5 forks source link

SAML authnrequest change #158

Closed phavekes closed 2 hours ago

phavekes commented 2 hours ago

This issue is imported from pivotal - Originaly created at Dec 9, 2020 by Bart Geesink

The authn request sent to EB contains an element that I\'d like to change: ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" is asked, but EB does only support the POST binding, hence it should be: ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"

While we\'re at it: The authnrequest also asks for "IsPassive="false"" . Since that is the default, and EB does not support "isPassive", can we leave it out here?

phavekes commented 2 hours ago

https://github.com/OpenConext/OpenConext-oidcng/commit/8570ea8afed0c12ad0b26bf97f86d85ba4b34faf (Okke Harsta - Dec 17, 2020)