-
Notifications
You must be signed in to change notification settings - Fork 5.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
EntityId ignored in xml relying-party-registration #11898
Comments
I do not know if this helps but I noticed the Saml2LoginBeanDefinitionParser does not read the |
Hi, @micvm, I believe you are correct. Are you interested in contributing a PR that fixes the issue? It would be helpful if it were based on the |
I can have a try but I am not familiar with the Spring SDK and internals. For example, I tried to launch gradle tasks and I get the following for branch 5.7.x:
Any idea how I could solve that? |
Describe the bug
The entityId specified for a relying-party-registration via xml namespace seems to be ignored and defaults to the metadata location.
To Reproduce
Define a relying party registration via xml and give an arbitrary name. Example
Download the metadata generated via
org.springframework.security.saml2.provider.service.web.Saml2MetadataFilter
e.g. by accessinghttps://myhost/saml2/service-provider-metadata/{registration-id}
and check the entityId. It does not correspond and, instead, is equal to the metadata URL (as defined in org.springframework.security.saml2.provider.service.registration.RelyingPartyRegistration.Builder class).Expected behavior
EntityId in the metadata XML should be identical with the one indicated within the relying-party-registration.
The text was updated successfully, but these errors were encountered: