providers/saml: disallow idp-initiated SSO by default and validate Request ID

2020-09-12 00:53:38 +02:00
parent c2ebaa7f64
commit ca0ba85023
10 changed files with 138 additions and 47 deletions
--- a/passbook/sources/saml/forms.py
+++ b/passbook/sources/saml/forms.py
@ -30,9 +30,10 @@ class SAMLSourceForm(forms.ModelForm):
        fields = SOURCE_FORM_FIELDS + [
            "issuer",
            "sso_url",
-            "name_id_policy",
-            "binding_type",
            "slo_url",
+            "binding_type",
+            "name_id_policy",
+            "allow_idp_initiated",
            "temporary_user_delete_after",
            "signing_kp",
        ]