python3-saml-django icon indicating copy to clipboard operation
python3-saml-django copied to clipboard

Signature validation failing using Microsoft AD as IdP

Open striker4150 opened this issue 2 years ago • 2 comments

Attempting to log out results in a signature validation error. According to the onelogin docs:

Some IdPs, notably Microsoft AD, use lower-case url-encoding, which makes signature validation to fail. To fix this issue, either pass query_string and set validate_signature_from_qs to True, which works for all IdPs, or set lowercase_urlencoding to True, which only works for AD.

As can be seen in views.py, neither validate_signature_from_qs nor lowercase_urlencoding is set, and I suspect that this is causing my configuration to fail. Could someone please look into this? Thanks.

striker4150 avatar Jul 06 '22 10:07 striker4150