• Holger Koser's avatar
    Improve SAML Signature and Response Validation · e46f2ebe
    Holger Koser authored
    * Improve Order of Namespace Declarations and Attributes in Canonical XML. This is related to an issue in goxmldsig for which I created an [pull request](https://github.com/russellhaering/goxmldsig/pull/17).
    * Do not compress the AuthnRequest if `HTTP-POST` binding is used.
    * SAML Response is valid if the Message and/or the Assertion is signed.
    * Add `AssertionConsumerServiceURL` to `AuthnRequest`
    * Validate Status on the Response
    * Validate Conditions on the Assertion
    * Validation SubjectConfirmation on the Subject
    e46f2ebe
glide.yaml 4.19 KB