Skip to content

[GOVCMS-14757] SimpleSAMLphp configuration hardening#550

Merged
yusufhm merged 2 commits into
govCMS:4.x-developfrom
barbun:misc/saml-config-adjustments
May 13, 2026
Merged

[GOVCMS-14757] SimpleSAMLphp configuration hardening#550
yusufhm merged 2 commits into
govCMS:4.x-developfrom
barbun:misc/saml-config-adjustments

Conversation

@barbun
Copy link
Copy Markdown
Contributor

@barbun barbun commented May 1, 2026

Issue

Upon review it was identified that the current SimpleSAMLphp configuration should utilise some hardening.

Proposed solution

  • Disable debug by default.
  • Set logging level to WARNING level by default.
  • Remove hard-coded secret salt.
  • Remove hard-coded admin pass.
  • Enable metadata protection by default.
  • Isolate cookie name by application.
  • Enable SLO by default.

@yusufhm yusufhm merged commit 17ae1fd into govCMS:4.x-develop May 13, 2026
Ali-Haider-24 pushed a commit that referenced this pull request May 21, 2026
* Added hardening.

* Reverted ForceAuthn.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants