SATOSA
SATOSA copied to clipboard
Proxy translating between different authentication protocols (SAML2, OpenID Connect and OAuth2)
### All Submissions: * [X] Have you checked to ensure there aren't other open [Pull Requests](../../pulls) for the same update/change? * [X] Have you added an explanation of what problem...
## Code Version Satosa 8.2.0 (docker), running an saml2 frontend and oidc backend, proxy from OIDC to SAML ## Expected Behavior - (1) Hasher and HashProcessor produce the same hash...
During responding to the token request, satosa tries to get the configured extra troken claims from the `provider.userinfo`, see https://github.com/IdentityPython/SATOSA/blob/master/src/satosa/frontends/openid_connect.py#L367, but since the informations are not in the database (or...
Feature request: SAML2 Backend key/value store to store request IDs for running multiple instances
## Code Version 8.2.0 ## Use case If running multiple instances of the proxy it'd be useful to be able to connect an external store (e.g. redis) for request IDs....
Hello, Im sorry for posting here, hoping someone can help What I am trying: Google/G-Suite as the SAML IDP AWS Workspaces as the SAML SP in my saml2_backend.yaml I had...
### All Submissions: * [ ] Have you checked to ensure there aren't other open [Pull Requests](../../pulls) for the same update/change? * [ ] Have you added an explanation of...
Hi @c00kiemon5ter , When testing my deployment, I ran into a caching issue where my browser would replay stale SAML messages originally sent by the SATOSA saml2 backend. I can...
Currently the `satosa-saml-metadata` script creates a metadata file called `backend.xml`, or, when creating split metadata files, filenames that include an index number: https://github.com/IdentityPython/SATOSA/blob/c629dd5dfce44675bc263241c880a6481ccb33d6/src/satosa/scripts/satosa_saml_metadata.py#L23 So, when one starts to use `--split-backend`...
## Code Version 8.4.0 ## Expected Behavior If the browser sends `Cookie: foo: bar boo; SATOSA...`, the cookie `foo` should be ignored. ## Current Behavior It fails with "Unknown error"...
# EntraID OIDC Backend We have a need to use EntraID as an authentication backend, but EntraID does not closely follow the OpenID spec and can't be integrated with the...