spring-projects / spring-projects/spring-security
Saml2 support overriding the SAMLRequest parameters
Open
@jzheaux is already working on this.
Since Nov 11, 2020.
in: saml2
type: enhancement
- Dominant language
- Java
- Stars
- 9.6k
- Forks
- 6.3k
- Avg merge
- 2d 11h
- Merged PRs (30d)
- 52
Description
Expected Behavior
As a service provider, it would be great if we could override the following parameter in a SAMLRequest
- saml:AuthnContextClassRef
- ForceAuthn
- IsPassive
Current Behavior
Currently, we are having the default values configured which is
- saml:AuthnContextClassRef = empty
- ForceAuthn =false OpenSamlAuthenticationRequestFactory.java#L171
- IsPassive = false OpenSamlAuthenticationRequestFactory.java#L172
Context
As a service provider, we want to enforce the user is always prompted for authentication while access some sensitive service so we would like to set the following values.
saml:AuthnContextClassRef = urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
ForceAuthn =true
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.