Merge pull request #808 from mcneilco/brianbolt/issue807

ACAS SAML fails against Azure AD
mcneilco · Oct 20, 2021 · dbed380 · dbed380
2 parents ddda990 + 9d24cff
commit dbed380
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/app_template.coffee b/app_template.coffee
@@ -71,6 +71,7 @@ startApp = ->
 				entryPoint: config.all.server.security.saml.entryPoint
 				issuer: config.all.server.security.saml.issuer
 				cert: config.all.server.security.saml.cert
+				disableRequestedAuthnContext: config.all.server.security.saml.disableRequestedAuthnContext
 			}, csUtilities.ssoLoginStrategy)
 		else
 			console.error("NOT USING SSO configs! config.all.server.security.saml.use is set true but CustomerSpecificServerFunction 'ssoLoginStrategy' is not defined.")

diff --git a/conf/config.properties.example b/conf/config.properties.example
@@ -365,6 +365,7 @@ server.security.saml.lastNameAttribute=lastName
 server.security.saml.emailAttribute=email
 server.security.saml.logoutRedirectURL=https://<organization>.okta.com
 server.security.saml.roles.sync=false
+server.security.saml.disableRequestedAuthnContext=true
 
 #Controls whether Roo syncs the AuthorRole table with authorities granted in LDAP
 server.security.syncLdapAuthRoles=false