Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Migration] Signing the SAML Logout Response for IDP Initiated SSO Flow #16325

Closed
ImalshaG opened this issue Jul 26, 2023 · 0 comments
Closed

Comments

@ImalshaG
Copy link
Contributor

In previous IS versions, when response signing is enabled for a SP, the logout saml response will be signed for SP initiated SSO flows but will not be signed for IDP initiated SSO flows. This bug was fixed through wso2-extensions/identity-inbound-auth-saml#399 where now the behaviour will be changed to receive a signed logout response if response signing is enabled for both sp initiated and idp initiated sso flows.

After this change, by default, the SAML logout response for SP initiated SSO and IDP initiated SSO login flows will be signed if the Enable Response Signing property is enabled in the Service Provider. But if a customer requires the previous behaviour where the SAML logout response during IDP initiated SSO flow is not signed, the following config can be added to the deployment.toml.

[saml]
enable_saml_idp_init_logout_response_signing = false

Related issue: #16207

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Status: Done
Development

No branches or pull requests

5 participants