search

derricksmith / phpsaml

GLPI Plugin - SAML integration using the Onelogin SAML Library
MIT License
32 stars 24 forks source link

Plugin sends invalid Relaystate in auth request to Idp #95

Closed DonutsNL closed 2 years ago

DonutsNL commented 2 years ago

The plugin is including a relaystate in the initial request URI send to the idp. It includes &RelayState=https://[glpihost.domain.tld]:443/?SSO=1

As a result this value is also send back to the GLPI instance after succesfull login resulting in an redirect error message.

image

DonutsNL commented 2 years ago

Somewhere the portnumber https://host.domain.tld:**PORT**/ is included. It seems that GLPI cannot handle this.

DonutsNL commented 2 years ago

It seems that the port number is added by Apache and populated in the $_SERVER superglobal.

image

DonutsNL commented 2 years ago

Added a fix to initial PR.

DonutsNL commented 2 years ago

Same issue as described in: https://github.com/derricksmith/phpsaml/issues/83