pysaml2
pysaml2 copied to clipboard
Python implementation of SAML2
Using PySAML2 v4.6.2, I am trying to build a SAML Response consumer (not necessarily a SP). I receive a message using pyCURL (attached as [xmldoc-_7bb54ec7a8a59f971b1b995206ce6a344600051f63.txt](https://github.com/IdentityPython/pysaml2/files/2473418/xmldoc-_7bb54ec7a8a59f971b1b995206ce6a344600051f63.txt) ) - I then do...
Looking into [attributemaps/saml_uri.py][amsu] I see the following (picking parts): ```py UCL_DIR_PILOT = 'urn:oid:0.9.2342.19200300.100.1.' LDAPGVAT_UCL_DIR_PILOT = UCL_DIR_PILOT MAP = { # [...] LDAPGVAT_UCL_DIR_PILOT+'1': 'PVP-USERID', LDAPGVAT_UCL_DIR_PILOT+'3': 'PVP-MAIL', # [...] UCL_DIR_PILOT+'1': 'uid', UCL_DIR_PILOT+'3':...
`Entity._parse_request` can possibly raise a wide range of Exceptions (ValueError, TypeError, OSError, IncorrectlySigned, UnravelError) and return `None` on top of that. None of the exceptions are caught and all propagate...
We currently use AES CBC by default in order to encrypt the username of the authenticated users in the encrypted session cookies. AES CBC protects only confidentiality and not the...
Looking at my generated metadata, it seems support is advertised for many different SigningMethods. ``` ``` It seems this list is generated by checking if each is supported by the...
Hi, I have created IDP and SP with the given example, Now I wanted to create SOAP Service Provider which should be able to communicate with IDP. How do I...
It is a different topic than entity configuration, is not a concern of the calling program and causes redundancy in an application with many configurations. Proposed resolution: - pysaml2 shall...
The function do_requested_attribute() in src/saml2/metadata.py makes it impossible to specify any other name format than "urn:oasis:names:tc:SAML:2.0:attrname-format:uri" for the RequestedAttribute values in the generated metadata. My suggestion is to add CONFIG[service][sp][attribute_name_format]...
The example for a SP implemented the following SAML bindings: - BINDING_HTTP_REDIRECT - BINDING_HTTP_POST - BINDING_HTTP_ARTIFACT - BINDING_SOAP but the configuration in example/sp-wsgi/sp_conf.py.example contains only BINDING_HTTP_POST for the ACS. All...
### All Submissions: * [X] Have you checked to ensure there aren't other open [Pull Requests](../../pulls) for the same update/change? * [X] Have you added an explanation of what problem...