Clément Oudot
70f853e681
SAML: IDP option to sign SSO requests
2010-04-01 09:55:33 +00:00
Thomas CHEMINEAU
a3a80947bc
SAML: move code that load SAML services and IDPs into _SAML
2010-03-25 11:01:32 +00:00
Clément Oudot
409ceb953c
SAML: option to adapt session _utime with SessionNotOnOrAfter
2010-03-25 10:02:53 +00:00
Clément Oudot
953806ed93
SAML: manage SessionNotOnOrAfter but do not adapt session _utime yet
2010-03-24 13:44:24 +00:00
Clément Oudot
aa5831493a
SAML: add AllowLoginFromIDP option
2010-03-24 13:01:14 +00:00
Clément Oudot
5c26f07d27
SAML: proxy restriction was not working, now it is set in authn request conditions
2010-03-24 12:33:45 +00:00
Clément Oudot
099c846d42
perltidy + manager bug with node created from special parent nodes
2010-03-13 17:39:50 +00:00
Clément Oudot
5a61c04a2d
SAML: use correct IDP name in confirmation message
2010-03-13 16:49:33 +00:00
Clément Oudot
f80620fae4
SAML: No need to force default nameIDFormat value
2010-03-12 16:19:41 +00:00
Clément Oudot
44aeddbc5c
Bug with samlIDPMetaDataOptions upload and use make tidy
2010-03-11 15:00:59 +00:00
Clément Oudot
ce8d8ee84e
SAML: correct a bug if no NameIDFormat were given
2010-03-11 12:00:25 +00:00
Clément Oudot
058ab93a15
SAML: manage HTTP method choice for SLO
2010-03-05 17:11:40 +00:00
Clément Oudot
ae4ff763df
SAML: manage HTTP method choice for SSO
2010-03-05 16:57:11 +00:00
Clément Oudot
8564389fa7
SAML: manage IDP resolution rules
2010-03-05 15:37:16 +00:00
Clément Oudot
8d1793b7bc
SAML: check OneTimeUse and Issuer (for proxy test)
2010-03-05 15:23:49 +00:00
Clément Oudot
c2b7c07dc1
SAML: use NameIDFormat option
2010-03-05 09:28:28 +00:00
Clément Oudot
0979ba0f28
SAML: use ForceAuthn option
2010-03-05 08:54:01 +00:00
Clément Oudot
71283e3596
SAML: attribute request in UserDBSAML
2010-03-03 16:54:23 +00:00
Clément Oudot
13769b69f2
SAML: stop timer when choosing an IDP
2010-03-01 16:14:13 +00:00
Xavier Guimard
a746a440e6
perltidy
2010-03-01 10:45:04 +00:00
Clément Oudot
923e509226
SAML: split conditions validation between time and auience
2010-03-01 09:42:25 +00:00
Clément Oudot
1cecbe512d
SAML: Manage logout redirection URL trough RelayState in SLO
2010-03-01 09:19:28 +00:00
Clément Oudot
2c584cf7f7
SAML:
...
* Use authForce method to know if authentication should be forced
* Use a common method to store replay protection data
* Use _utime in relaystate state
* Let Lasso choose the defaut transport and binding for requests
2010-02-28 19:07:02 +00:00
Xavier Guimard
58c28c5732
* Inheritance instead of @EXPORT
...
* Purge CGI::Session dependency (LA)
2010-02-26 10:53:43 +00:00
Clément Oudot
7eefc6af1f
SAML: manage SOAP
2010-02-26 09:12:18 +00:00
Clément Oudot
9c228f7022
SAML: Manage relayState trough session backend
2010-02-25 11:39:55 +00:00
Clément Oudot
cc79d3cfe9
SAML: use the last configuration format for IDP metadata
2010-02-24 17:48:20 +00:00
Clément Oudot
9937568f97
SAML: manage SSO response trough Artifact
2010-02-24 15:24:54 +00:00
Clément Oudot
f0c29c779a
SAML:
...
* Manage SSO message like SLO message
* Send SLO request trough REDIRECT and POST
* Reponse to SSO request trough REDIRECT, POST and SOAP
* Reponse to SLO request trough REDIRECT, POST and SOAP
2010-02-24 10:11:01 +00:00
Clément Oudot
38060929fb
SAML:
...
* Use new configuration keys
* sum up replay protection code
2010-02-22 17:12:16 +00:00
Clément Oudot
9766b8457a
SAML: SP SLO response trough HTTP-REDIRECT and SOAP
2010-02-19 11:33:34 +00:00
Clément Oudot
2238075912
SAML: SP SLO validate request
2010-02-18 17:42:31 +00:00
Clément Oudot
bd2c92f207
SAML: SP SLO in progress
2010-02-18 17:22:04 +00:00
Clément Oudot
a6d7f7a3a3
SAML:
...
* Send correct logout request
* Use getMetaDataURL to get URL from metadata configuration keys
2010-02-18 09:58:59 +00:00
Clément Oudot
46764465b2
SAML: SP SLO in progress
2010-02-17 17:37:38 +00:00
Clément Oudot
4c5d286196
SAML: rename keys of samlIDMetaData hash
2010-02-17 15:34:19 +00:00
Clément Oudot
5b34644e10
SAML: SLO initiated by SP (not achieved)
2010-02-17 15:13:00 +00:00
Clément Oudot
b9a6eb6743
SAML: replay protection was buggy
2010-02-17 12:02:11 +00:00
Clément Oudot
3da1b1ed19
SAML: conditions validations corrected in Lasso
2010-02-17 11:51:01 +00:00
Clément Oudot
d5d56f7649
SAML: conditions validation
2010-02-15 17:03:07 +00:00
Clément Oudot
88b81bf2aa
SAML: assertion replay protection
2010-02-15 13:44:06 +00:00
Clément Oudot
12668e7cc2
SAML: register attributes from SAML authn statement in session
2010-02-12 14:26:45 +00:00
Clément Oudot
71f142316f
SAML:
...
* IDP metadata are in metadata key
* Use IDP internal ID instead of entityID to keep choosen IDP information
* Use base64 encoding for RelayState value
2010-02-12 10:53:43 +00:00
Clément Oudot
cb7f7f8bd1
SAML: first complete SP cinematic implementation
2010-02-11 12:39:42 +00:00
Clément Oudot
be4198a31e
SAML: Lasso can now use ; in query string
2010-02-10 10:59:20 +00:00
Clément Oudot
f265cbce57
SAML: NameID management
2010-02-09 20:49:23 +00:00
Clément Oudot
e891c13ad3
SAML: use query_string and get name identifier
2010-02-09 09:02:39 +00:00
Clément Oudot
040aea4dfb
SAML:
...
* Redirect user to IDP SSO URL
* Catch IDP response for HTTP-REDIRECT binding
2010-02-08 17:24:45 +00:00
Xavier Guimard
fad774f41b
Fix some little bugs
2010-02-08 10:06:21 +00:00
Clément Oudot
434f8ea286
SAML: better organization name management
2010-02-05 17:18:09 +00:00