search

steffow / meteor-accounts-saml

SAML SP tested with OpenAM
27 stars 29 forks source link

question: about settings parameters #4

Closed Gobliins closed 7 years ago

Gobliins commented 7 years ago

Does this lib also work without the last three parameters in the settings

"idpSLORedirectURL": "http://openam.idp.io/openam/IDPSloRedirect/metaAlias/zimt/idp", "privateKeyFile": "certs/mykey.pem", // path is relative to $METEOR-PROJECT/private "publicCertFile": "certs/mycert.pem" // eg $METEOR-PROJECT/private/certs/mycert.pem

?

I've used the https://atmospherejs.com/natestrauser/accounts-saml and here the other 4 parameters (issuer, entrypoint, provider, cert) were enough.

steffow commented 7 years ago

Well you need at least the privKey/pubCert combo as trust in SAML is established via PKC.

Makes sense?

On 23 Sep 2016, at 11:02, Gobliins notifications@github.com wrote:

Does this lib also work without the last three parameters in the settings

"idpSLORedirectURL": "http://openam.idp.io/openam/IDPSloRedirect/metaAlias/zimt/idp", "privateKeyFile": "certs/mykey.pem", // path is relative to $METEOR-PROJECT/private "publicCertFile": "certs/mycert.pem" // eg $METEOR-PROJECT/private/certs/mycert.pem

?

I've used the https://atmospherejs.com/natestrauser/accounts-saml and here the other 4 parameters (issuer, entrypoint, provider, cert) were enough.

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or mute the thread.

Gobliins commented 7 years ago

Coming from OAuth2 i am not so familiar with SAML and dig. signatures. So the "Cert" parameter takes the Certficate from the IDP? And the privateKey/publicCert i generate myself?

steffow commented 7 years ago

Think of it a mutual SSL authN. You can generate yourself but trust chain must be valid.

On 23 Sep 2016, at 12:23, Gobliins notifications@github.com wrote:

Coming from OAuth2 i am not so familiar with SAML and dig. signatures. So the "Cert" parameter takes the Certficate from the IDP? And the privateKey/publicCert i generate myself?

— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or mute the thread.

Gobliins commented 7 years ago

Ok seems like i made it working, we can close this issue then, thx.