python3-saml-django
python3-saml-django copied to clipboard
Signature validation failing using Microsoft AD as IdP
Attempting to log out results in a signature validation error. According to the onelogin docs:
Some IdPs, notably Microsoft AD, use lower-case url-encoding, which makes signature validation to fail. To fix this issue, either pass query_string and set validate_signature_from_qs to True, which works for all IdPs, or set lowercase_urlencoding to True, which only works for AD.
As can be seen in views.py, neither validate_signature_from_qs
nor lowercase_urlencoding
is set, and I suspect that this is causing my configuration to fail. Could someone please look into this? Thanks.