p2-inc / idp-wizard

Identity Provider setup wizards for Keycloak
https://phasetwo.io
Other
1 stars 1 forks source link

Update ADFS defaults to sign requests #174

Closed xgp closed 4 months ago

xgp commented 4 months ago

The ADFS wizard saves the IdP in 2 steps. This is so the federation metadata URL that we give to the user in the Wizard is already live, and returns the correct parameters.

We need to add the following defaults to (both) the initial creation and the final saving. It should be sufficient to just add it to the initial creation, as I believe we use that object when updating the IdP at the confirmation stage.

This is what the changes look like in Keycloak:

306045735-10dddaa6-42eb-4a84-b186-06b8b2b3efd9

Which should be possible by setting the additional values in the IdP object body:

config->wantAuthnRequestsSigned=true
config->signatureAlgorithm=RSA_SHA256
config->xmlSigKeyInfoKeyNameTransformer=CERT_SUBJECT
pnzrr commented 4 months ago

Added, created with changes

image