Skip to content

Commit

Permalink
Update README to remove an insecure suggestion (#704)
Browse files Browse the repository at this point in the history
* Remove insecure suggestion for ADFS federation from README

* reflect the mandatory nature of audience
  • Loading branch information
cjbarth committed Jun 25, 2022
1 parent b29c243 commit aef40ff
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions docs/adfs/README.md
Expand Up @@ -51,12 +51,12 @@ passport.use(
authnContext: [
"http://schemas.microsoft.com/ws/2008/06/identity/authenticationmethod/password",
],
// not sure if this is necessary?
acceptedClockSkewMs: -1,
identifierFormat: null,
// this is configured under the Advanced tab in AD FS relying party
signatureAlgorithm: "sha256",
racComparison: "exact", // default to exact RequestedAuthnContext Comparison Type
// From the metadata document
audience: "https://adfs.acme_tools.com/FederationMetadata/2007-06/FederationMetadata.xml",
},
function (profile, done) {
return done(null, {
Expand Down

0 comments on commit aef40ff

Please sign in to comment.