Comments (2)
8 okt 2014 kl. 12:43 skrev Patrick Brosi [email protected]:
we are still working on an implemenation of a Pyramid-based SAML SP via pysaml2. Our IdP uses MS-ADFS. Apparantly, ADFS is not entirely faithful to the SAML specification.
An old well known pattern when it comes to MS.
The attribute values specified in the token are missing the nameFormat XML-attribute. Example:
testtestpysaml2 won't parse attributes without a specified nameFormat. We fixed the problem by falling back to urn:oasis:names:tc:SAML:2.0:attrname-format:uri if the nameFormat is missing. This is done by initializing the member name_format in the class AttributeType_ with NAME_FORMAT_URI by default (see commit geops/pysaml2@1fce6d1).
Is this a legitimate way to handle the problem of ADFS compatibility or do you think it could cause problems? If so, what do you think would be the preferred way to provide an ADFS compatibility mode?
I think it’s a very reasonable way of handling this.
I will add it to the main branch.
— Roland
”Being able to think like a child is an important attribute of being an adult” - Eddie Izzard
from pysaml2.
Perfect. I issued a pull request for this: #148
Thank you very much for your quick answer.
from pysaml2.
Related Issues (20)
- Signature verfication failed - invalid document format -- QName-awareness of attribute values and lxml HOT 14
- where to change Encryption Algorithm Negotiation List HOT 1
- AttributeStatement missing from final response HOT 3
- Wrong error log message when assertion signature verification fails
- Audience restriction check for SAML response processing HOT 2
- pysaml2 raises DeprecationWarning: datetime.datetime.utcnow() when running tests with pytests on python 3.12
- [Bug/question] Configured name_form ignored for attributes in `idp_user` HOT 1
- unable to get local issuer certificate HOT 1
- Status code checking in unsuccessful responses
- xmlsec can not read already opened file (djangosaml2) HOT 2
- how to stop attribute maping to convert email to urn:oid:1.2.840.113549.1.9.1.1 HOT 1
- Broken identity cache (shelve / bdb) when multiple parallel logins happen: _dbm.error: cannot add item to database
- xmlschema 3.0.1 broken dependency HOT 4
- Issue with adfs attribute namespace HOT 2
- Empty AttributeStatement throwing validation error HOT 3
- Incorrect domain validation HOT 1
- Vulnerable PyOpenSSL dependency in example code causes Snyk to flag pysaml2 HOT 1
- Outstanding query checking not working when allow_unsolicited is on
- Using attribute_map_dir files throw error 'No module named __init__'
- Help Creating a Subject/SubjectConfirmation/SubjectConfirmationData/KeyInfo/KeyValue/RSAKeyValue Element
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from pysaml2.