handnot2 / samly

Elixir Plug library to enable SAML 2.0 SP SSO in Phoenix/Plug applications.
MIT License
126 stars 93 forks source link

Config to indicate if req/resp are signed #1

Closed handnot2 closed 7 years ago

handnot2 commented 7 years ago

OOTB Samly signs the SAML requests and responses. This is the desired behavior for production deployments. In case it is setup to work with IdPs that have this capability turned off, the following config options can be explicity set to false for correct integration.

Enable following config options:

sign_requests sign_metadata signed_envelopes_in_idp_resp signed_assertion_in_idp_resp