Commit Graph

50 Commits

Author SHA1 Message Date
Clément Oudot
07c528d6fd SAML: update POD 2010-03-26 09:35:31 +00:00
Clément Oudot
53d5212068 SAML: remove HTTP-GET binding since it is not supported by SAML2 (replaced by HTTP-REDIRECT) 2010-03-25 16:43:34 +00:00
Thomas CHEMINEAU
b67654d42d SAML: code to load SP metadata 2010-03-25 14:44:38 +00:00
Thomas CHEMINEAU
dec9d562d8 SAML: work in progress in IssuerDBSAML 2010-03-25 11:24:52 +00:00
Thomas CHEMINEAU
a3a80947bc SAML: move code that load SAML services and IDPs into _SAML 2010-03-25 11:01:32 +00:00
Clément Oudot
bc7df7b3bc SAML: correct NAME POD section to prevent lintian warning 2010-03-25 08:55:42 +00:00
Clément Oudot
5c26f07d27 SAML: proxy restriction was not working, now it is set in authn request conditions 2010-03-24 12:33:45 +00:00
Clément Oudot
ae4ff763df SAML: manage HTTP method choice for SSO 2010-03-05 16:57:11 +00:00
Clément Oudot
c2b7c07dc1 SAML: use NameIDFormat option 2010-03-05 09:28:28 +00:00
Clément Oudot
0979ba0f28 SAML: use ForceAuthn option 2010-03-05 08:54:01 +00:00
Clément Oudot
71283e3596 SAML: attribute request in UserDBSAML 2010-03-03 16:54:23 +00:00
Clément Oudot
923e509226 SAML: split conditions validation between time and auience 2010-03-01 09:42:25 +00:00
Clément Oudot
1cecbe512d SAML: Manage logout redirection URL trough RelayState in SLO 2010-03-01 09:19:28 +00:00
Clément Oudot
2c584cf7f7 SAML:
* Use authForce method to know if authentication should be forced
* Use a common method to store replay protection data
* Use _utime in relaystate state
* Let Lasso choose the defaut transport and binding for requests
2010-02-28 19:07:02 +00:00
Xavier Guimard
58c28c5732 * Inheritance instead of @EXPORT
* Purge CGI::Session dependency (LA)
2010-02-26 10:53:43 +00:00
Clément Oudot
7eefc6af1f SAML: manage SOAP 2010-02-26 09:12:18 +00:00
Clément Oudot
9c228f7022 SAML: Manage relayState trough session backend 2010-02-25 11:39:55 +00:00
Clément Oudot
9937568f97 SAML: manage SSO response trough Artifact 2010-02-24 15:24:54 +00:00
Clément Oudot
38060929fb SAML:
* Use new configuration keys
* sum up replay protection code
2010-02-22 17:12:16 +00:00
Clément Oudot
9766b8457a SAML: SP SLO response trough HTTP-REDIRECT and SOAP 2010-02-19 11:33:34 +00:00
Clément Oudot
2238075912 SAML: SP SLO validate request 2010-02-18 17:42:31 +00:00
Clément Oudot
bd2c92f207 SAML: SP SLO in progress 2010-02-18 17:22:04 +00:00
Clément Oudot
a6d7f7a3a3 SAML:
* Send correct logout request
* Use getMetaDataURL to get URL from metadata configuration keys
2010-02-18 09:58:59 +00:00
Clément Oudot
46764465b2 SAML: SP SLO in progress 2010-02-17 17:37:38 +00:00
Clément Oudot
5b34644e10 SAML: SLO initiated by SP (not achieved) 2010-02-17 15:13:00 +00:00
Clément Oudot
3da1b1ed19 SAML: conditions validations corrected in Lasso 2010-02-17 11:51:01 +00:00
Clément Oudot
d5d56f7649 SAML: conditions validation 2010-02-15 17:03:07 +00:00
Clément Oudot
12668e7cc2 SAML: register attributes from SAML authn statement in session 2010-02-12 14:26:45 +00:00
Clément Oudot
71f142316f SAML:
* IDP metadata are in metadata key
* Use IDP internal ID instead of entityID to keep choosen IDP information
* Use base64 encoding for RelayState value
2010-02-12 10:53:43 +00:00
Clément Oudot
cb7f7f8bd1 SAML: first complete SP cinematic implementation 2010-02-11 12:39:42 +00:00
Clément Oudot
e323fe1cf5 SAML: customize authentication request 2010-02-10 17:18:46 +00:00
Clément Oudot
f265cbce57 SAML: NameID management 2010-02-09 20:49:23 +00:00
Clément Oudot
e891c13ad3 SAML: use query_string and get name identifier 2010-02-09 09:02:39 +00:00
Clément Oudot
040aea4dfb SAML:
* Redirect user to IDP SSO URL
* Catch IDP response for HTTP-REDIRECT binding
2010-02-08 17:24:45 +00:00
Xavier Guimard
788f688d78 little thing 2010-02-08 10:21:34 +00:00
Xavier Guimard
be93f8dc47 Somes fixes 2010-02-08 10:16:28 +00:00
Xavier Guimard
fad774f41b Fix some little bugs 2010-02-08 10:06:21 +00:00
Clément Oudot
434f8ea286 SAML: better organization name management 2010-02-05 17:18:09 +00:00
Clément Oudot
9b0c8ef9c1 SAML: use serviceToXML 2010-02-05 16:14:05 +00:00
Clément Oudot
a1976436b6 SAML: build authentication request 2010-02-04 16:02:02 +00:00
Clément Oudot
a15fdcaaae SAML:
* Lasso error can be a string or a Lasso::Error object
* Use private key to create Lasso::Server
* Perl binding bug resolution waiting: some method arguments should accept NULL values
2010-02-03 10:59:53 +00:00
Clément Oudot
79075b8e5c SAML: do not force optional parameters in add_provider_from_buffer 2010-02-02 22:16:29 +00:00
Clément Oudot
8b883bc147 SAML: typo in Lasso method 2010-02-02 21:55:25 +00:00
Clément Oudot
718e4fa136 SAML: add IDP in Lasso::Server 2010-02-01 17:07:40 +00:00
Clément Oudot
bcfdac9dd1 SAML: catch Glib messages 2010-02-01 15:24:56 +00:00
Clément Oudot
8abef3a99b SAML:
* perltidy
* use XML::Simple instead of XML::LibXML to parse XML
* Add initializeFromConfHash method to use directly configuration hash object
* Create Lasso server with metadata in buffers rather than XML files
2010-02-01 14:01:28 +00:00
Clément Oudot
ccbb52c13c SAML: create Lasso Server 2010-01-29 17:33:35 +00:00
Clément Oudot
5dd981fa85 SAML: load Lasso method 2010-01-29 10:44:56 +00:00
Xavier Guimard
8102f72d50 POD updates :
* spelling errors found by Lintian
 * encoding utf8
2010-01-03 08:09:59 +00:00
Xavier Guimard
a98e3ac8bb SAML skeleton 2009-04-07 20:38:24 +00:00