simplesamlphp-module-oidc
simplesamlphp-module-oidc copied to clipboard
simplesamlphp
A SimpleSAMLphp module for OIDC OP support.
Our authproc processing in `AuthProcService->processState()` is missing some features from the main `ProcessingChain`. If an authproc needs to redirect the user somewhere (for consent, mfa, etc) then there is no...
Browser based applications have newer [implementation recommendations](https://datatracker.ietf.org/doc/draft-ietf-oauth-browser-based-apps/) than what appeared in the original OAuth2 and OIDC specs. For a fully browser based public client the recommendation is to use the...
Hey! I have two questions: 1. Is attribute mapping done automatically? I just configured the module, but I can't retrieve all available attributes. It gives the following error: "Attribute useridattr...
Hi, We are using OIDC v2.1.2 and we are deploying the consent module offered by SSP 1.19. I was wondering if the consent module is supported by the OIDC flows...
Currently, oidc module supports configuring single private key / certificate pair. We should consider enabling support to define multiple, or at least old / new private key and certificate pair...
Because of the combination of ON DELETE CASCADE and TEXT and BLOB fields in the default schema, simplesaml-module-oidc cannot be used on ndbcluster. This is easily fixed be converting some...
https://openid.net/specs/openid-connect-frontchannel-1_0.html
We currently support only HTTP GET method at Authorization Endpoint. Per [OIDC spec for authn request](https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest): > Authorization Servers MUST support the use of the HTTP GET and POST methods...
Spec: https://datatracker.ietf.org/doc/html/rfc7662
Find a way to show which claims are supported by OP using 'claims_supported' property in discovery document as per https://openid.net/specs/openid-connect-discovery-1_0.html