Support "Enforce Signed AuthnRequest" option for SAML applications about terraform-provider-pingone

[icsrmontano]

Hi @patrickcping

The current documentation shows that the 0.22 provider supports sp_verification_certificate_ids. Do we support signed authn requests after all? if not, what's this for?

https://registry.terraform.io/providers/pingidentity/pingone/latest/docs/resources/application#sp_verification_certificate_ids

[patrickcping]

Hi @icsrmontano! We do support signed authn requests for SAML apps with the sp_verification_certificate_ids parameter, but we don't support the authn_request_signed parameter that this feature request intends to provide. Essentially, current signed authn request support is always unenforced.

The sp_verification_certificate_ids parameter does work, but it will be deprecated in favour of sp_verification.certificate_ids when this enhancement is implemented. It won't be a breaking change though, you'd still be able to use the sp_verification_certificate_ids parameter as we won't be removing deprecated parameters/attributes/resources it until the provider reaches v1.0.0.

[icsrmontano]

Perfect. Thank you!

…

On Tue, Oct 31, 2023, 8:43 a.m. Patrick Cowland ***@***.***> wrote: Hi @icsrmontano <https://github.com/icsrmontano>! We do support signed authn requests for SAML apps with the sp_verification_certificate_ids parameter, but we don't support the authn_request_signed parameter that this feature request intends to provide. Essentially, current signed authn request support is always unenforced. The sp_verification_certificate_ids parameter does work, but it will be deprecated in favour of sp_verification.certificate_ids when this enhancement is implemented. It won't be a breaking change though, you'd still be able to use the sp_verification_certificate_ids parameter as we won't be removing deprecated parameters/attributes/resources it until the provider reaches v1.0.0. — Reply to this email directly, view it on GitHub <#539 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AMILQ2VCT6FCRWIXMYVCUY3YCDW7XAVCNFSM6AAAAAA4NADKVCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTOOBXGE2DMOBXGI> . You are receiving this because you were mentioned.Message ID: ***@***.***>