honeymoose
/
OpenSearch
mirror of https://github.com/honeymoose/OpenSearch.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
OpenSearch/x-pack
History
Ioannis Kakavas b26aae3915
Compliant SAML Response destination check (#31175) 
Make SAML Response Destination check compliant

Only validate the Destination element of an incoming SAML Response
if Destination is present and the SAML Response is signed.
The standard [1] - 3.5.5.2 and [2] - 3.2.2 does mention that the
Destination element is optional and should only be verified when
the SAML Response is signed. Some Identity Provider implementations
are known to not set a Destination XML Attribute in their SAML
responses when those are not signed, so this change also aims to
enhance interoperability.

[1] https://docs.oasis-open.org/security/saml/v2.0/saml-bindings-2.0-os.pdf
[2] https://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf
 		2018-06-08 20:36:31 +03:00
..
dev-tools Fixup build after opening x-pack 2018-04-20 15:33:46 -07:00
docs [DOCS] Moves ML content to stack-docs 2018-06-07 09:26:00 -07:00
license-tools Make licensing FIPS-140 compliant (#30251) 2018-05-02 22:19:43 +03:00
plugin Compliant SAML Response destination check (#31175) 2018-06-08 20:36:31 +03:00
qa SQL: Make a single JDBC driver jar (#31012) 2018-06-08 10:15:28 -04:00
test Add check for feature aware implementations (#31081) 2018-06-05 19:56:22 -04:00
transport-client Migrate x-pack-elasticsearch source to elasticsearch 2018-04-20 15:29:54 -07:00
NOTICE.txt Migrate x-pack-elasticsearch source to elasticsearch 2018-04-20 15:29:54 -07:00
README.md Reorganize license files 2018-04-20 15:33:59 -07:00
build.gradle Build: Remove legacy bwc files from xpack (#30485) 2018-05-10 22:23:02 -07:00

README.md

Elastic License Functionality

This directory tree contains files subject to the Elastic License. The files subject to the Elastic License are grouped in this directory to clearly separate them from files licensed under the Apache License 2.0.