habsi/authentik
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sources/saml: fix NameIDFormat descriptor in metadata generation (#11614)

Browse Source 
* source/saml - Changed namespace of X509SSubjectName NameIDFormat

Under the SAML2 Core spec
(http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf)
8.3.3 the URI of the 5.509 Subject Name contains SAML:1.1 and not
SAML:2.0

* source/saml - Change NameIDFormat descriptor build logic to only append chosen format for the source.

* Merge diff
This commit is contained in:
Nicolas
2024-10-11 14:27:36 +02:00
committed by GitHub
parent fc7e78444f
commit 77c595a0fd
6 changed files with 37 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
web/src/admin/sources/saml/SAMLSourceForm.ts
View File

@ -402,9 +402,9 @@ export class SAMLSourceForm extends WithCapabilitiesConfig(BaseSourceForm<SAMLSo
${msg("Windows")}
</option>
<option
value=${NameIdPolicyEnum._20nameidFormatX509SubjectName}
value=${NameIdPolicyEnum._11nameidFormatX509SubjectName}
?selected=${this.instance?.nameIdPolicy ===
NameIdPolicyEnum._20nameidFormatX509SubjectName}
NameIdPolicyEnum._11nameidFormatX509SubjectName}
>
${msg("X509 Subject")}
</option>