opensource/grafana
1
0
Fork 0
mirror of https://github.com/grafana/grafana.git synced 2025-08-03 02:42:22 +08:00
Code Issues Packages Projects Releases Wiki Activity

Deps: Update SAML libraries (#52893)

Browse Source 
Deps: ensure goxmldsig is pinned

update go.mod
This commit is contained in:
Jo
2022-07-28 06:43:30 +00:00
committed by GitHub
parent 8a2d40c2bc
commit 51e2a1c0a4
3 changed files with 27 additions and 61 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
docs/sources/setup-grafana/configure-security/configure-authentication/saml.md
View File

@ -241,6 +241,9 @@ IdP-initiated SSO has some security risks, so make sure you understand the risks
SAML's single logout feature allows users to log out from all applications associated with the current IdP session established via SAML SSO. If the `single_logout` option is set to `true` and a user logs out, Grafana requests IdP to end the user session which in turn triggers logout from all other applications the user is logged into using the same IdP session (applications should support single logout). Conversely, if another application connected to the same IdP logs out using single logout, Grafana receives a logout request from IdP and ends the user session.
`HTTP-Redirect` and `HTTP-POST` bindings are supported for single logout.
When using `HTTP-Redirect` bindings the query should include a request signature.
### Assertion mapping
During the SAML SSO authentication flow, Grafana receives the ACS callback. The callback contains all the relevant information of the user under authentication embedded in the SAML response. Grafana parses the response to create (or update) the user within its internal database.