[OPENAM-5969] Allowing RequesterID chain when using SAML2 Idp Proxy - ForgeRock JIRA

Details

Type: Improvement
Status: Resolved
Priority: Major
Resolution: Fixed
Affects Version/s: 12.0.0, 13.5.0
Fix Version/s: 13.5.1, 14.0.0
Component/s: SAML
Labels:
- EDISON
- test-candidate

Target Version/s:

13.5.1, 14.0.0

Sprint:
AM Sustaining Sprint 21, AM Sustaining Sprint 27, AM Sustaining Sprint 28, AM Sustaining Sprint 29

Support Ticket IDs:

Verified Version/s:

13.5.1

Description

SAML2 standard defines a way to keep track of the chain of requesters when proxying. Currently this is not possible within OpenAM.

See in https://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf

<RequesterID> [Zero or More]
Identifies the set of requesting entities on whose behalf the requester is acting. Used to communicate the chain of requesters when proxying occurs, as described in Section 3.4.1.5. See Section 8.3.6 for a description of entity identifiers.

Attachments

Issue Links

mentioned in: Page Loading...

Activity

People

Assignee:

Quentin CASTEL [X] (Inactive)

Reporter:

Nathalie Hoet

Votes:

0 Vote for this issue

Watchers:

5 Start watching this issue

Dates

Created:

12/May/15 10:53 AM

Updated:

26/May/17 12:23 PM

Resolved:

19/Oct/16 11:56 AM

Time Tracking

Estimated:

8h

Remaining:

3h

Logged:

5h