Validate OAuth 2.0 SAML Bearer Assertions

Open nflaig opened this issue 4 years ago • 0 comments

Currently, the whole login response from the identity provider can be validated using the parseLoginResponse method of the ServiceProviderInstance. This login response also contains the SAML assertion which is used for OAuth 2.0 SAML Bearer Assertions as specified here.

Is there a way to validate just the SAML assertion? I did not find a public api for this but it sounds like it should be easy to add that

Jul 27 '21 08:07 nflaig