SAML2AttributeQueryProfile

Definition

his profile is used when the SSOProfile does not include attributes statements in the assertion.

Screen overview

&&TODO&&

Standard attributes

&&TODO&&

• Class: class name.
• Enabled: if it is checked (selected option is Yes) that protocol will be enabled.
• Sign Responses: a sign response guarantees the service provider that the response has been issued by the Identity Provider &&TODO&&
  • Conditional ¿Como funciona?
  • Always
  • Never
  •  
• Sign Assertions: it's advisable to sign every assertion, so it avoids assertion spoofing. &&TODO&&
• Sign Assertions &&TODO&&
• Encrypt Assertions: it's a good practice to encrypt assertions. Nevertheless, it makes more dificult to diagnose misconfiguration of SAML federation. Disable it only when needed.
• Encrypt NameIds: encrypt Name Ids when they are not part of an assertion.
• Assertion Proxy Count: number of SAML proxies that can forward an assertion. 0 stands for no limit.