Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Allow blocking of unsolicited SSO

Description

This would depend on the new support for message correlation checking, and would also assume that SAML 1 (and WS-Fed) were disabled separately to be useful.

Environment

None

Activity

Scott CantorFebruary 25, 2020 at 2:45 AM

Finalized logic, added blockUnsolicited flag to MessageFlow rule and to new policy example.

Scott CantorFebruary 14, 2020 at 9:52 PM

Implemented and lightly tested as a new option via a predefined alternate SecurityPolicy. Currently this is just at the bearer confirmation check. Could be added to the MessageFlow rule, still debating.

Fixed

Details

Assignee

Reporter

Components

Fix versions

Created February 11, 2020 at 6:06 PM
Updated April 13, 2020 at 5:49 PM
Resolved February 25, 2020 at 2:45 AM