Re: SAML Configuration

2019-09-04 Thread Srinivasan RK
end without signed. I could not find how to do it > in Jenkins. > > > I am not sure what this checkbox "Disable Signature Redirect Binding Auth > Request" is used for under SAML Configuration. I tried changing the Data > Binding to HTTP-Redirect and select the chec

Re: SAML Configuration

2019-08-29 Thread Ivan Fernandez Calvo
I have made a PR that disables the Auth Request on HTTP-POST binding when the encryption settings are not set, the same behavior HTTP-REDIRECT binding, when the PR build finishes, you would have a version of the plugin with the patch here https://ci.jenkins.io/blue/organizations/jenkins/Plugins

Re: SAML Configuration

2019-08-29 Thread Ivan Fernandez Calvo
modify the JENKINS_HOME/saml-sp-metadata.xml does not work, I am reviewing it because maybe there is a way to implement it by extending a class. -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving

Re: SAML Configuration

2019-08-29 Thread Ivan Fernandez Calvo
Hi, It is not possible to disable signed on HTTP-POST, I've found some difficulties to make it on pac4j library ( https://issues.jenkins-ci.org/browse/JENKINS-47966), there is a workaround the IIRC works that it is to modify the JENKINS_HOME/saml-sp-metadata.xml file manually to disable it, you

SAML Configuration

2019-08-28 Thread Srinivasan RK
ot;Disable Signature Redirect Binding Auth Request" is used for under SAML Configuration. I tried changing the Data Binding to HTTP-Redirect and select the check-box, but when I view the spMetaData file, it still shows up with AuthnRequestSigned = ture and bindings:HTTP-POST. Versions : Je