search

zibasec / django-saml2-pro-auth

SAML2 authentication backend for Django wrapping OneLogin's python-saml package https://github.com/onelogin/python3-saml
MIT License
30 stars 28 forks source link

SAML bad Request - The message of the response is not signed and the SP require it #47

Open giovannamascarenhas opened 2 years ago

giovannamascarenhas commented 2 years ago

Hello, I have a Django app that uses the package, we puted the wantMessagesSigned: True, we added this config in the admin interface as well, and we still receiving this error, I'm pretty sure the IDP sends a signature for us. Any change that we made is reflected in the application, is like the package not get the values from settings. "security": { "nameIdEncrypted": False, "authnRequestsSigned": True, "logoutRequestSigned": True, "logoutResponseSigned": True, "signMetadata": True, "wantMessagesSigned": True, "wantAssertionsSigned": True, "wantAssertionsEncrypted": True, "wantNameId": True, "wantNameIdEncrypted": False, "wantAttributeStatement": True, "signatureAlgorithm": "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", "digestAlgorithm": "http://www.w3.org/2000/09/xmldsig#sha1",

Thank you.