search

janus-ssp / janus

Fully featured metadata registration administration module built on top of simpleSAMLphp.
Other
13 stars 8 forks source link

Prevent accidental 'Allow All' (SP) scenario for IdP that moves into production #589

Open mrvanes opened 8 years ago

mrvanes commented 8 years ago

Recently a test IdP that had 'Allow All' set on SP tab was moved into production, causing some grief for single SP-IdP clients that were suddenly confronted with the WAYF.

A possible solution to prevent this shoot-in-the-foot scenario would be to check 'Allow None' and uncheck 'Allow All' on State dropdown "onChange" (to production) event, possibly accompanied by an alert, telling the user that 'Allow None' was checked.