Skip to content

Specifying encryption details in /saml/metadata #150

@mjobin-mdsol

Description

@mjobin-mdsol

Would it make sense to specify the encryption algo and key transport in the saml metadata?
I think SP that imports configuration needs it to work with encryption.

I found this example.

<EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep">
  <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
  <xenc11:MGF Algorithm="http://www.w3.org/2009/xmlenc11#mgf1sha256"/>
</EncryptionMethod>
<EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc">
  <xenc:KeySize>128</xenc:KeySize>
</EncryptionMethod>

can this be configured already?

Metadata

Metadata

Assignees

No one assigned

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions