Hello, looking for some guidance on implementing Azure AD SSO with CAS 5.3.

We've been working on implementing these guides 
https://apereo.github.io/cas/5.3.x/installation/Configuring-SAML2-Authentication.html#saml2-authentication
https://docs.microsoft.com/en-us/azure/active-directory/develop/single-sign-on-saml-protocol

We can get the services to communicate but CAS is sending an XML with a 
statement that Azure AD does not support. Specifically the "NameQualifier"

<?xml version="1.0" encoding="UTF-8"?>
<saml2p:AuthnRequest AssertionConsumerServiceURL="XXXX" 
AttributeConsumingServiceIndex="0" Destination="XXXXX" ForceAuthn="false" 
ID="XXXXX" IsPassive="false" IssueInstant="XXXXX" 
ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
ProviderName="pac4j-saml" Version="2.0" 
xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"><saml2:Issuer 
Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" 
NameQualifier="XXXXX" 
xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">XXXXX</saml2:Issuer></saml2p:AuthnRequest>

Is there any way to work around this issue or remove this statement from 
the XML?

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/87ffd2e3-c48f-4486-8010-d4a42fbb42b6%40apereo.org.

Reply via email to