-
Bug
-
Resolution: Postponed
-
Major
-
Jenkins 2.230, SAML Plugin 1.1.5, java-1.8.0-openjdk-1.8.0.242.b08-0.el7_7.x86_64
We are unable to get the plugin working with any of the 1.X releases, and have been version locked at 0.14. I've noticed that the SAML request sent by Jenkins in the 1.1.5 version now contains a block with a signature at the end, which our IdP team has identified as the root cause of the issue. I've tried toggling plugin settings but there does not seem to be a way to remove the SigAlg and Signature from the request. The only workaround we've found is to downgrade the plugin to 0.14.
Is there a way to remove this block from the request in version 1.1.5?
- is related to
-
JENKINS-47966 Add option to disable request signature in saml plugin >= 1.0.2
- Closed
-
JENKINS-47640 Allow to disable Request signature on HTTP-POST request
- Resolved
- links to