sentry-auth-saml2
sentry-auth-saml2 copied to clipboard
Feature request: support advanced SAML configuration
Sentry SAML Provider supports advanced SAML configuration, but this plugin doesn't. see:
The provider may also bind the `advanced` configuration. This dict
provides advanced SAML configurations. The dict should match the shape:
HINT: You *probably* don't need this.
>>> state.get('advanced')
{
'authn_request_signed': # Sign the authentication request?
'logout_request_signed': # Sign the logout request?
'logout_response_signed': # Sign the logout response?
'metadata_signed': # Sign the metadata?
'want_message_signed': # Expect signed message
'want_assertion_signed': # Expect signed assertions
'want_assertion_encrypted': # Expect encrypted assertions
'signature_algorithm': # Algorithm used to sign / verify requests / responses
'digest_algorithm': # Algorithm used to generate / verify digests
'x509cert': # Public Service Provider key
'private_key': # Private Key used for signing / encryption
}
code here: https://github.com/getsentry/sentry/blob/6ba3b1e63fc442680792ff566e5a2b14632739cd/src/sentry/auth/providers/saml2.py#L230-L248