chore(auth): update SAML strategy configuration (#9829)

Added `disableRequestedAuthnContext` flag to SAML auth strategy to align
with compatibility requirements. Adjustments ensure seamless integration
with certain Identity Providers. No functional impact on existing flows.
This commit is contained in:
Antoine Moreaux
2025-01-24 14:52:42 +01:00
committed by GitHub
parent edd7212f0b
commit f23de2fa22

View File

@ -36,9 +36,10 @@ export class SamlAuthStrategy extends PassportStrategy(
issuer: this.sSOService.buildIssuerURL(identityProvider),
callbackUrl: this.sSOService.buildCallbackUrl(identityProvider),
idpCert: identityProvider.certificate,
wantAssertionsSigned: false,
// TODO: Improve the feature by sign the response
wantAssertionsSigned: false,
wantAuthnResponseSigned: false,
disableRequestedAuthnContext: true,
signatureAlgorithm: 'sha256',
};