Skip to content

Wrong AssertionConsumerService location #15955

@sorquan

Description

@sorquan

Bug Summary

After login with SAML, AWX redirecting to http location.

In metadata i see http location for AssertionConsumerService.

<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" cacheDuration="P10D"
    entityID="https://awx.domain.local">
    <md:SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="false"
        protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>PUBCERT</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</md:NameIDFormat>
        <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
            Location="http://awx.domain.local/sso/complete/saml/" index="1" />
    </md:SPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="en-US">AWX</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="en-US">AWX</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="en-US">https://awx.domain.local</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
        <md:GivenName>IT</md:GivenName>
        <md:EmailAddress>it@domain.local</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="support">
        <md:GivenName>IT</md:GivenName>
        <md:EmailAddress>it@domain.local</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

AWX version

24.6.1

Select the relevant components

  • UI
  • UI (tech preview)
  • API
  • Docs
  • Collection
  • CLI
  • Other

Installation method

kubernetes

Modifications

no

Steps to reproduce

  1. Configure SAML with HTTPS
  2. Login

Expected results

Login SAML with HTTPS

Actual results

Failed login with HTTP

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions