Hello, looking for some guidance on implementing Azure AD SSO with CAS 5.3.
We've been working on implementing these guides https://apereo.github.io/cas/5.3.x/installation/Configuring-SAML2-Authentication.html#saml2-authentication https://docs.microsoft.com/en-us/azure/active-directory/develop/single-sign-on-saml-protocol We can get the services to communicate but CAS is sending an XML with a statement that Azure AD does not support. Specifically the "NameQualifier" <?xml version="1.0" encoding="UTF-8"?> <saml2p:AuthnRequest AssertionConsumerServiceURL="XXXX" AttributeConsumingServiceIndex="0" Destination="XXXXX" ForceAuthn="false" ID="XXXXX" IsPassive="false" IssueInstant="XXXXX" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" ProviderName="pac4j-saml" Version="2.0" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" NameQualifier="XXXXX" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">XXXXX</saml2:Issuer></saml2p:AuthnRequest> Is there any way to work around this issue or remove this statement from the XML? -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/87ffd2e3-c48f-4486-8010-d4a42fbb42b6%40apereo.org.
