Uninett/mod_auth_mellon

Include AssertionConsumerServiceURL in AuthnRequest

Closed this issue · 2 comments

To improve compatibility with some IdPs we should include the AssertionConsumerServiceURL and ProtocolBinding attributes in the generated authentication request.

To avoid inconsistencies between what we send and what we have configured in the metadata, we should use the first AssertionConsumerService element from the SP metadata with isDefault="true".

Unfortutantely, that requires some changes to the Lasso library first. See: http://listes.entrouvert.com/arc/lasso/2014-06/msg00002.html

This issue has been migrated from Google Code:
https://code.google.com/p/modmellon/issues/detail?id=27

Simo Sorce has contributed a patch that adds this attribute: eda061b

Version 0.9.0 is released, with the patch for this feature.