mirror of
https://github.com/fleetdm/fleet
synced 2026-05-10 02:30:56 +00:00
f078660243
for #16139 this fixes a copy/paste error that caused the MDM SSO flow to validate audiences using the global config EntityID since we also consider an audience valid if you set EntityID to be: - the same in both (case for local dev) - your Fleet URL or the full path to the SSO API endpoint (QA) we didn't notice this until now.
21 lines
759 B
PHP
21 lines
759 B
PHP
<?php
|
|
|
|
$metadata['https://localhost:8080'] = array(
|
|
'AssertionConsumerService' => [
|
|
'https://localhost:8080/api/v1/fleet/sso/callback',
|
|
'https://localhost:8080/api/v1/fleet/mdm/sso/callback',
|
|
],
|
|
'NameIDFormat' => 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddres',
|
|
'simplesaml.nameidattribute' => 'email',
|
|
);
|
|
|
|
# used in integration tests and to validate SSO flows that use a
|
|
# separate application for MDM SSO (with a single
|
|
# AssertionConsumerService)
|
|
$metadata['mdm.test.com'] = array(
|
|
'AssertionConsumerService' => [
|
|
'https://localhost:8080/api/v1/fleet/mdm/sso/callback',
|
|
],
|
|
'NameIDFormat' => 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddres',
|
|
'simplesaml.nameidattribute' => 'email',
|
|
);
|