• Hi

    we were not able to log in via SAML anymore and checked the source and found that the SAML request contained instructions that are leading to fail

    <samlp:RequestedAuthnContext $authnComparisonAttr>
    <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef>
    </samlp:RequestedAuthnContext>

    PasswordProtectedTransport

    As soon as we replaced it with “unspecified” it worked

    <samlp:RequestedAuthnContext $authnComparisonAttr>
    <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified</saml:AuthnContextClassRef>
    </samlp:RequestedAuthnContext>

    Can you please ensure that the code does right requests? I understand from my IT colleague that IdP provides the instructions for context and we shall set unspecified so that IdP instructions succeed

    File: wp-saml-auth\vendor\onelogin\php-saml\src\Saml2\AuthnRequest.php

    Line: 136

    Thanks

Viewing 16 replies (of 16 total)
  • Plugin Contributor Anais Pantheor

    (@anaispantheor)

    Hi @shonu, thanks for following up and letting us know what worked for you. Glad to hear it’s resolved!

    Your experience and feedback are valuable, we’ll take them into consideration for future plugin updates to make this configuration smoother.

    Thank you for your patience throughout this process, and don’t hesitate to reach out if anything else comes up!

Viewing 16 replies (of 16 total)

You must be logged in to reply to this topic.