mirror of
https://github.com/zitadel/zitadel.git
synced 2024-12-15 20:38:00 +00:00
e57a9b57c8
# Which Problems Are Solved ZITADEL currently always uses `urn:oasis:names:tc:SAML:2.0:nameid-format:persistent` in SAML requests, relying on the IdP to respect that flag and always return a peristent nameid in order to be able to map the external user with an existing user (idp link) in ZITADEL. In case the IdP however returns a `urn:oasis:names:tc:SAML:2.0:nameid-format:transient` (transient) nameid, the attribute will differ between each request and it will not be possible to match existing users. # How the Problems Are Solved This PR adds the following two options on SAML IdP: - **nameIDFormat**: allows to set the nameid-format used in the SAML Request - **transientMappingAttributeName**: allows to set an attribute name, which will be used instead of the nameid itself in case the returned nameid-format is transient # Additional Changes To reduce impact on current installations, the `idp_templates6_saml` table is altered with the two added columns by a setup job. New installations will automatically get the table with the two columns directly. All idp unit tests are updated to use `expectEventstore` instead of the deprecated `eventstoreExpect`. # Additional Context Closes #7483 Closes #7743 --------- Co-authored-by: peintnermax <max@caos.ch> Co-authored-by: Stefan Benz <46600784+stebenz@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| actions_converter.go | ||
| actions.go | ||
| auth_checks.go | ||
| custom_text_converter.go | ||
| custom_text.go | ||
| flow.go | ||
| iam.go | ||
| idp_converter_test.go | ||
| idp_converter.go | ||
| idp.go | ||
| information.go | ||
| language.go | ||
| oneof.go | ||
| org_converter.go | ||
| org_integration_test.go | ||
| org.go | ||
| policy_label_converter.go | ||
| policy_label.go | ||
| policy_lockout_converter.go | ||
| policy_lockout.go | ||
| policy_login_converter.go | ||
| policy_login.go | ||
| policy_notification.go | ||
| policy_password_age_converter.go | ||
| policy_password_age.go | ||
| policy_password_complexity_converter.go | ||
| policy_password_complexity.go | ||
| policy_privacy_converter.go | ||
| policy_privacy.go | ||
| project_application_converter.go | ||
| project_application.go | ||
| project_converter.go | ||
| project_grant_converter.go | ||
| project_grant.go | ||
| project.go | ||
| replacer.md | ||
| server_integration_test.go | ||
| server.go | ||
| user_converter.go | ||
| user_grant_converter.go | ||
| user_grant.go | ||
| user_integration_test.go | ||
| user.go | ||