SAML 2.0 HTTP-Artifact binding

[paweles]

Description

Support for the HTTP-Artifact binding in addition to the already implemented HTTP-Redirect and HTTP-POST bindings

This issue was already mentioned in the previous ticket system:
https://issues.redhat.com/browse/KEYCLOAK-831

Discussion

No response

Motivation

SAML 2.0 HTTP-Artifact binding is a must-have feature for any integration with Polish Government IDP (login.gov.pl). I believe that not only for this.

Details

Described also in SP-Initiated SSO: POST/Artifact Bindings part of https://www.oasis-open.org/committees/download.php/27819/sstc-saml-tech-overview-2.0-cd-02.pdf

[mthmulders]

More specifically, I think this relates to https://issues.redhat.com/browse/KEYCLOAK-9993.

To add to the motivation: SAML 2.0 HTTP-Artifact is also required for Dutch government identity a.k.a. DigiD. The "Koppelvlakspecificatie DigiD SAML Authenticatie" (in Dutch) explicitly mentions the use of HTTP Artifact binding to resolve the identity of the logged-in user.

[limux82]

Is there any news on this topic? This is a very useful feature to connect to governament IDP

[tmorin]

Hi,

We started a discussion, following a beginning of implementation -> #25745

Best regards