SAML-Toolkits / wordpress-saml

OneLogin SAML plugin for Wordpress
MIT License
65 stars 74 forks source link

Signature not present in Authn Request #77

Closed sumitgupta911 closed 5 years ago

sumitgupta911 commented 5 years ago

Hi, I have selected the option to Sign Auth request on the plugin and have dumped key and crt in the certs folder. But the plugin is sending the Signature as a Query parameter and not signing the Authn Request. I believe Signature should be present in the Authn request. Please suggest. Thanks, Sumit

pitbulk commented 5 years ago

AuthNRequest is only supported with the HTTP-Redirect binding which Sign a SAML Message by adding the Signature Query parameter, not embedding it on the XML

sumitgupta911 commented 5 years ago

Okay, I will update my code accordingly then. Thanks :)