Merge pull request #3519 from FlowFuse/3518-remove-auth-context

Set disableRequestedAuthnContext in SAML strategy
FlowFuse · Feb 28, 2024 · 1160256 · 1160256
2 parents 335538c + 1df752d
commit 1160256
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/forge/ee/routes/sso/auth.js b/forge/ee/routes/sso/auth.js
@@ -34,6 +34,7 @@ module.exports = fp(async function (app, opts) {
 
     fastifyPassport.use(new MultiSamlStrategy({
         passReqToCallback: true, // makes req available in callback,
+        disableRequestedAuthnContext: true, // Helps make things work with Entra
         wantAssertionsSigned: false, // TODO: allow this to be set per provider
         async getSamlOptions (request, done) {
             if (request.body?.RelayState) {