Add signature.algorithm as config field in the SAML configuration

Bug #1704887 reported by Kristina Hoeppner
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Mahara
Fix Released
Wishlist
F Devine

Bug Description

The default SAML implementation only supports SHA1 at the moment. Some IDPs do not allow that anymore. Therefore, a SAML config would need to get a line added manually:

htdocs/auth/saml/config/config.php inside the config array, add
the following line

'signature.algorithm' =>
'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256';

It would be better if that was more configurable directly on the front-end rather than in core code.

That field could be added to /admin/extensions/pluginconfig.php?plugintype=auth&pluginname=saml

Revision history for this message
Kristina Hoeppner (kris-hoeppner) wrote :

Francis is looking into this.

Changed in mahara:
assignee: nobody → F Devine (catalystfd)
Revision history for this message
Kristina Hoeppner (kris-hoeppner) wrote :
Revision history for this message
Mahara Bot (dev-mahara) wrote : A change has been merged

Reviewed: https://reviews.mahara.org/7878
Committed: https://git.mahara.org/mahara/mahara/commit/059b0765e4ce6867cccfda3c6b1d5426fe2c878d
Submitter: Robert Lyon (<email address hidden>)
Branch: master

commit 059b0765e4ce6867cccfda3c6b1d5426fe2c878d
Author: Francis Devine <email address hidden>
Date: Tue Jul 18 11:48:32 2017 +1200

Bug 1704887: Expose signing algorithm config to mahara

Allows you to set the signature algorithm for simplesamlphp from the
Mahara SAML plugin configuration screen.

The default setting is sha256, with sha1 available as a fallback for
those institutions who need it.

For an already existing site the default is set to sha1 as that is what
it would have been previously

behatnotneeded

Change-Id: I3eb628d837bdabbfc7641620e94fc2f127beceb9

Robert Lyon (robertl-9)
Changed in mahara:
status: In Progress → Fix Committed
tags: added: nomin
tags: added: nominatedfeature
removed: nomin
Robert Lyon (robertl-9)
Changed in mahara:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.