Saml2: Overriding AssertionConsumerServiceUrl

Created on 15 Oct 2018 · 6Comments · Source: Sustainsys/Saml2

Is there anyway to override AssertionConsumerServiceUrl endpoint so it is not "Acs"? I see the module path I can set, but I did not see anyway to override the "acs"

enhancement

Source

j-hurst

👍1

Most helpful comment

@mjisaak The ACS is an SP concept, not an Idp concept, so it is not on your Idp but on your Sp. The default is https://[mysp]/Saml2/Acs, but as @j-hurst writes you can change it with the ModulePath setting.

AndersAbel on 22 Oct 2018

👍3

All 6 comments

No, it's hard coded. Marking this for the next major release, it's a commonly asked for customization.

AndersAbel on 16 Oct 2018

@AndersAbel So the Assertion Consumer Service (ACS) Url is https://[myidp]/Saml2/Acs or is it just https://[myidp]/Acs ?

mjisaak on 22 Oct 2018

The default is /Saml2/Acs, but you can override the 'Saml2' part of the URL under SPOptions with the ModulePath property.

j-hurst on 22 Oct 2018

👍2

AndersAbel on 22 Oct 2018

👍3

Perfect. Thanks a lot! 👍

mjisaak on 22 Oct 2018

Having a setter property on the ACS URL as a Uri object is by far the most straightforward way of doing this. All this wizardry to auto configure is fine, but sometimes you need a one-liner override as suggested here.

For my situation, having the /Acs suffix is not acceptable.
With SSL termination over a reverse proxy, my server receives the request as http and trying to be smart, it provides the ACS to the iDP also as http://. However my ACS actually needs to be https://

Just give us the option to set the thing manually. Please.