Skip to content

Fix: Prevent broken signature of SAML Assertion.

Ben Kraufmann requested to merge fix-broken-signature into master

Reserialization of the SAML Assertion provided by the client may break the assertion signature, if the declared namespace prefixes in both SAML Assertion and XQuery module do not match. As we do not know, which prefix the client application uses, we must avoid using a prefix for the SAML2 namespace in the module.

Merge request reports