SSO not working with SAML2 and ADFS #6524
Labels
Priority:Important
Issues & PRs that are important; broken functions, errors - there are workarounds
Status:Fix Proposed
A issue that has a PR related to it that provides a possible resolution
Type: Bug
Bugs within the core SuiteCRM codebase
Because a standard setting in Onelogin SSO is not working when using SAML2 in combination with ADFS.
Users get a login screen from ADFS when opening SuiteCRM. Other applications using the same ADFS server are logged in automatically.
According to an issue at the github of onelogin this is a setting in de config of onelogin that defaults to the wrong value.
SAML-Toolkits/php-saml#62
It is a simple change in the settings.php
`\modules\Users\authentication\SAML2Authenticate\lib\onelogin\php-saml\lib\Saml2\
Original:
if (!isset($this->_security['requestedAuthnContext'])) {
$this->_security['requestedAuthnContext'] = true;
}
Working:
if (!isset($this->_security['requestedAuthnContext'])) {
$this->_security['requestedAuthnContext'] = false;
}
`
The text was updated successfully, but these errors were encountered: