wso2is - WSO2 Identity Server SAML SSO endpoint hard codes the AuthnContextClassRef -


in wso2is v4.6.0, authncontextclassref value hardcoded urn:oasis:names:tc:saml:2.0:ac:classes:password. in fact, saml sso endpoint authenticates users via https default , authncontextclassref value in case should urn:oasis:names:tc:saml:2.0:ac:classes:passwordprotectedtransport.

what's best way correct or issue on wso2's radar?

i've created jira ticket issue: https://wso2.org/jira/browse/identity-2585

while waiting offical fix, can override defaultsaml2ssomanager specifiing own class in repository/conf/security/application-authentication.xml with:

parameter name="saml2ssomanager">my.version.of.saml2ssomanager

i use modified version of defaultsaml2ssomanager , able connect our idp.


Comments

Popular posts from this blog

get url and add instance to a model with prefilled foreign key :django admin -

css - Make div keyboard-scrollable in jQuery Mobile? -

ruby on rails - Seeing duplicate requests handled with Unicorn -