clegaspi / clegaspi/saml_reader

remove or bypass acs input validation for Ops Manager

Open
#91 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
6
Forks
2
PR merge metrics
No merged PRs in 30d

Description

Noticed that Ops Manager ACS URLs do not pass acs input validation.

Would it be possible to bypass or disable it for OM?

Thanks!

```
SAML READER
----------------------
Parsing SAML data...
Done
------------
-----MONGODB CLOUD VERIFICATION-----

The Audience URL does not match the anticipated pattern.
Audience URL: https://om-443-elb-1873156365.us-east-2.elb.amazonaws.com
------

The Assertion Consumer Service URL does not match the anticipated pattern.
ACS URL: https://om-443-elb-1873156365.us-east-2.elb.amazonaws.com/saml/assert
------

-----SAML SUMMARY-----
IDENTITY PROVIDER (from certificate):
Okta
---
SIGNING CERTIFICATE EXPIRATION DATE (MM/DD/YYYY):
05/28/2034
---
ASSERTION CONSUMER SERVICE URL:
https://om-443-elb-1873156365.us-east-2.elb.amazonaws.com/saml/assert
---
AUDIENCE URL:
https://om-443-elb-1873156365.us-east-2.elb.amazonaws.com
---
ISSUER URI:
http://www.okta.com/exkeow00pdOUYrRxi697
---
ENCRYPTION ALGORITHM:
SHA256
---
NAME ID:
Value: patmaz@edenishere.us
Format: urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified
---
ATTRIBUTES:
Name: firstName
Is Duplicated: No
Value: pat
--
Name: lastName
Is Duplicated: No
Value: maz
--
Name: email
Is Duplicated: No
Value: patmaz@edenishere.us
--
Name: memberOf
Is Duplicated: No
Values:
- Everyone
- org-owners
- poweruser
--
```

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.