Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Note

...

Advanced Configuration

Note, this is an advanced configuration feature. Most deployments can rely on the <SSO> shorthand element.

The SAML 2.0 ACS implements the SAML 2.0 Browser SSO and ECP profiles. In addition, the ACS performs attribute extractionfiltering, and resolution based on the data supplied by the IdP.

The following Binding values are supported:

  • urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST

  • urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign

  • urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact

  • urn:oasis:names:tc:SAML:2.0:bindings:PAOS

Attributes

Include Page
ACSCommonAttributes
ACSCommonAttributes

In addition the following may be specified:

Name

Type

Default

Description

ignoreNoPassive 

ignoreNoPassive 

boolean

false

If true, causes the SAML StatusCode

of urn

of urn:oasis:names:tc:SAML:2.0:status:

NoPassive to

NoPassive to be ignored and treated as a silent condition resulting in redirection back to the original resource.

Example

Code Block
languagexml
<md:AssertionConsumerService Location="/SAML2/POST" index="1"                                         
    Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"                                          
    conf:ignoreNoPassive="true" />

...