无法连接到SSO IDP

发布于 2025-02-11 05:35:27 字数 1068 浏览 3 评论 0 原文

我有一个问题。我们在Symfony 5.4下有一个应用程序，该应用程序通过OnElogInsAmlBundle Bundle提供SAML连接器。安装此应用程序是不同的客户。通常，在大多数客户中，当我们连接到他们的IDP时，我们会有这样的答案：

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" 
...
  <saml:Subject>
  ...
    <saml:AttributeStatement>
      <saml:Attribute Name="uid">
        <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">john_doe</saml:AttributeValue>
      </saml:Attribute>

我们能够在应用程序中

使用用户名映射属性UID。就是这样：

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ... >   
  <Subject>
           <NameID>john_doe</NameID>
            ...
        </Subject>

就像在捆绑包中一样，我们有此代码来检验attibute，它不起作用

$ entries = $ this-＆gt; _queryAssertion（'/saml：attributestatement/saml：attribute'：allatibute';

您是否知道是否可以配置AD FS来发送＆lt; SAML：属性＆gt; 的响应？

原文

I have a question. we have an app under symfony 5.4 which provide SAML connector via the OneloginSamlBundle bundle.
This app is installed is different customers.
Normally in majority of customers, when we connect to their idp, we have an answer like this :

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" 
...
  <saml:Subject>
  ...
    <saml:AttributeStatement>
      <saml:Attribute Name="uid">
        <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">john_doe</saml:AttributeValue>
      </saml:Attribute>

and we are able to map the attribute uid with the username in our application

The problem is we have with a customer which use AD FS is the response is like this :

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ... >   
  <Subject>
           <NameID>john_doe</NameID>
            ...
        </Subject>

And as in the bundle we have this code to retrive the attibute, it doesn't work

$entries = $this->_queryAssertion('/saml:AttributeStatement/saml:Attribute');

Do you know if AD FS could be configured to send a response with <saml:Attribute> ?