Currently, the SAML connector is configured using either a hardcoded cert PEM file or data (that is read once when the connector is configured). IdP that rotate their signing keys publish the certs of their keys via metadata.
I saw that there's a TODO comment regarding metadata already -- What's the state of this? Is this on any roadmap?
I've also wondered how to do this in Dex. Would it be an acceptable thing to spawn a goroutine in the Open() method? Or would this be covered by #968, and an external process that polls the IdP's metadata and sets the certificate(s) to be used for signature verification?
Thanks! 😃
Currently, the SAML connector is configured using either a hardcoded cert PEM file or data (that is read once when the connector is configured). IdP that rotate their signing keys publish the certs of their keys via metadata.
I saw that there's a TODO comment regarding metadata already -- What's the state of this? Is this on any roadmap?
I've also wondered how to do this in Dex. Would it be an acceptable thing to spawn a goroutine in the
Open()method? Or would this be covered by #968, and an external process that polls the IdP's metadata and sets the certificate(s) to be used for signature verification?Thanks! 😃