Skip to content

Commit

Permalink
chore(auth): update SAML strategy configuration (#9829)
Browse files Browse the repository at this point in the history
Added `disableRequestedAuthnContext` flag to SAML auth strategy to align
with compatibility requirements. Adjustments ensure seamless integration
with certain Identity Providers. No functional impact on existing flows.
  • Loading branch information
AMoreaux authored Jan 24, 2025
1 parent edd7212 commit f23de2f
Showing 1 changed file with 2 additions and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -36,9 +36,10 @@ export class SamlAuthStrategy extends PassportStrategy(
issuer: this.sSOService.buildIssuerURL(identityProvider),
callbackUrl: this.sSOService.buildCallbackUrl(identityProvider),
idpCert: identityProvider.certificate,
wantAssertionsSigned: false,
// TODO: Improve the feature by sign the response
wantAssertionsSigned: false,
wantAuthnResponseSigned: false,
disableRequestedAuthnContext: true,
signatureAlgorithm: 'sha256',
};

Expand Down

0 comments on commit f23de2f

Please sign in to comment.