My IDP requires "service providers [to] include a certificate for encryption in the metadata".

This is implemented with an additional <md:KeyDescriptor use="encryption"> section in the SP metadata.

onelogin/php-saml will add this to the metadata if wantAssertionsEncrypted is set to true.

A patch that allows this setting to be added is incoming.

CommentFileSizeAuthor
#2 samlauth-allow_idp_assertion_encryption-3099353-1.patch4 KBjeffam

Comments

jeffam created an issue. See original summary.

jeffam’s picture

jeffam
Primary language English
commented
StatusFileSize
new samlauth-allow_idp_assertion_encryption-3099353-1.patch4 KB

Here's the patch.

  • roderik committed 0518bc0 on 8.x-3.x authored by jeffam 
    Issue #3099353 by jeffam: Allow encryption of IDP assertions
roderik’s picture

roderik
Primary language Dutch
Location Amsterdam,NL / Budapest,HU
commented
Status: Active » Fixed

Thanks for this. It's some work to fill all the boiler plate in the various files, but I believe we're slowly increasing usability for everyone this way.

I took some liberty with the descriptions, as I'm still getting ideas to improve the existing options.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.