Skip to content

LOGIN-311 Apply SAML profile configs for security controls.

Marvin S. Addison requested to merge login-311-sec-flags into main

Add entity attributes to override SAML profile configuration knobs that govern message security controls that we model in ED:

  • signAuthnRequests - Toggle signed SAML authentication requests
  • signAssertions - Toggle signed SAML response assertions
  • disableEncryption - Disable encrypted SAML assertions and NameIDs

Based on IdP documentation, response signing is disabled whenever assertion signing is enabled for performance reasons.

Merge request reports