honeymoose
/
OpenSearch
mirror of https://github.com/honeymoose/OpenSearch.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
OpenSearch/x-pack
History
Ioannis Kakavas b2e48c9fa7
Support RequestedAuthnContext (#31238) 
* Support RequestedAuthnContext

This implements limited support for RequestedAuthnContext by :
- Allowing SP administrators to define a list of authnContextClassRef
to be included in the RequestedAuthnContext of a SAML Authn Request
- Veirifying that the authnContext in the incoming SAML Asertion's
AuthnStatement contains one of the requested authnContextClassRef
- Only EXACT comparison is supported as the semantics of validating
the incoming authnContextClassRef are deployment dependant and
require pre-established rules for MINIMUM, MAXIMUM and BETTER

Also adds necessary AuthnStatement validation as indicated by [1] and
[2]

[1] https://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf
    3.4.1.4, line 2250-2253
[2] https://kantarainitiative.github.io/SAMLprofiles/saml2int.html
    [SDP-IDP10]
 		2018-06-12 12:23:40 +03:00
..
dev-tools Fixup build after opening x-pack 2018-04-20 15:33:46 -07:00
docs [DOCS] Moves ML content to stack-docs 2018-06-07 09:26:00 -07:00
license-tools Remove all unused imports and fix CRLF (#31207) 2018-06-11 15:12:12 +02:00
plugin Support RequestedAuthnContext (#31238) 2018-06-12 12:23:40 +03:00
qa Upgrade to Netty 4.1.25.Final (#31232) 2018-06-11 16:55:07 -04:00
test Remove all unused imports and fix CRLF (#31207) 2018-06-11 15:12:12 +02:00
transport-client Migrate x-pack-elasticsearch source to elasticsearch 2018-04-20 15:29:54 -07:00
NOTICE.txt Migrate x-pack-elasticsearch source to elasticsearch 2018-04-20 15:29:54 -07:00
README.md Reorganize license files 2018-04-20 15:33:59 -07:00
build.gradle Build: Remove legacy bwc files from xpack (#30485) 2018-05-10 22:23:02 -07:00

README.md

Elastic License Functionality

This directory tree contains files subject to the Elastic License. The files subject to the Elastic License are grouped in this directory to clearly separate them from files licensed under the Apache License 2.0.