Skip to content

Changes to support ADFS/WS-Federation SAML2.0 - #126

Closed
sandeep048 wants to merge 3 commits into
SAML-Toolkits:masterfrom
sandeep048:master
Closed

Changes to support ADFS/WS-Federation SAML2.0#126
sandeep048 wants to merge 3 commits into
SAML-Toolkits:masterfrom
sandeep048:master

Conversation

@sandeep048

Copy link
Copy Markdown

Added few extra settings to play nice with Microsoft ADFS/WS-Federation SAML2.0 server.


name_id_policy = ''
if name_id_policy_format:
name_id_policy = """<samlp:NameIDPolicy Format="%(name_id_policy)s" AllowCreate="true" />""" % name_id_policy_format

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why instead don't set at SP settings, the NameIDFormat as "urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified"

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nameid-format:unspecified is not working. For our specific case we wouldn't want the <samlp:NameIDPolicy> tag at all in the generated SAML.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ok, this is something that I will consider in a future release, to be able to not define NameIDPolicy element.

@pitbulk

pitbulk commented Apr 8, 2016

Copy link
Copy Markdown
Contributor

I must reject your PR, you don't need those changes in order to be compatible with ADFS/WS-Federation.

Read my comments.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants