Uploaded image for project: 'Keycloak'
  1. Keycloak
  2. KEYCLOAK-3373

SAML IdP Metadata retrieval is inconsistent

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Done
    • 1.9.8.Final
    • 6.0.0
    • SAML
    • Keycloak Sprint 19
    • 5

    Description

      The discussion as of Jan 2019 results into:

      • Remove "SAML Metadata ISPSSODescriptor" option from Client Installation tab
      • Add a link to the SAML IDP descriptor URL under the realm settings as we do for OIDC well-known endpoint.


      Original description:
      There are (at least) two ways to retrieve the IdP's metadata.

      1. Do a get on auth/realms/{realm}/protocol/saml/descriptor
      2. Use the Installation tab on the realms SAML client and select "SAML Metadata ISPSSODescriptor"

      The metadata returned should be semantically the same but they are not. Attached are two metadata files, one for each method.

      Attachments

        Issue Links

          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. KEYCLOAK-8537 IDPSSODescriptor from installation tab omits HTTP-Redirect SingleLogoutService but is present in IDPSSODescriptor retrieved via REST

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. KEYCLOAK-8639 Support RelayState in POST endpoint for SAML IdP-initiated Identity Brokering

          • Minor - To be worked after urgent, high, and medium priorities are resolved. This term is chosen when the severity of the issue is low, or the complexity or effort to correct it may be higher, relatively speaking. For low priority issues, known workarounds exist or are not needed due to the trivial effort needed to address the issue.
          • Closed

          Activity

            People

              hmlnarik@redhat.com Hynek Mlnařík
              john.dennis John Dennis (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: