|
|
12/9/2016 12:09:41 PM
Fix failing adapter tests
|
|
|
12/9/2016 12:09:13 PM
Do not include KeyName for brokered IdPs
|
12/9/2016 11:33:40 AM
Directory Federation Services require that the subject name
matches KeyName element when present. While KeyName is beneficial for
Keycloak adapters, it breaks functionality for AD FS as the name
included there is a key ID, not certificate subject expected by AD FS.
This patch contains functionality that excludes KeyName from SAML
messages to identity providers. This behaviour should be made
configurable per client/identity provider and is prepared to do so,
however actual GUI changes are left for a separate patch.
|
|
|
|
|
|
|
|
|
|
|
