question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

SAML Assertion Consumer Service URL has http instead of https

See original GitHub issue

Hey,

I have a clean docker+Zulip setup with enabled SAMLAuthBackend behind a reverse proxy. I’ve configured SOCIAL_AUTH_SAML_ENABLED_IDPS section in settings.py and added x509cert from IdP. After that I can see server’s metadata at https://zulip.example.com/saml/metadata.xml but next Location has http scheme

<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://zulip.example.com/complete/saml/" index="1"/>

that cause my browser to show warning during the SAML assertion exchange.

Could you please help find the place where I can change the scheme? Thanks!

Issue Analytics

  • State:closed
  • Created 2 years ago
  • Comments:12 (7 by maintainers)

github_iconTop GitHub Comments

1reaction
timabbottcommented, Jul 23, 2021

Can you stop by chat.zulip.org? I think this will be easier debugged interactively with @mateuszmandera there.

0reactions
mateuszmanderacommented, Nov 19, 2021

Hmm no, I don’t think anything happened with this in chat.zulip.org. @intelligentops Have you been able to find a solution to this?

Read more comments on GitHub >

github_iconTop Results From Across the Web

SAML Assertion Consumer Service URL has http instead of https
Hey, I have a clean Zulip setup with enabled SAMLAuthBackend behind a reverse proxy. I've configured SOCIAL_AUTH_SAML_ENABLED_IDPS section ...
Read more >
Relative AssertionConsumerServiceUrl redirects always to ...
AssertionConsumerServiceUrl ="~/LoginSAML.aspx"/> ... Is it possible that the URL for the current request is HTTP rather than HTTPS?
Read more >
Simplesaml redirecting to HTTP instead of HTTPS
I have my HTTPS setup on the load balancer and decrypts and sends raw data to the app servers. When I hit https://www.mysite.com/sso/saml...
Read more >
Shibboleth ACS URL mismatch with http and https
My ACS URL is being rewritten from https://foo.com/ to http://foo.com/ which is causing the below Exception. Microsoft.IdentityServer.
Read more >
HTTPS vs HTTP for ACS URL - Okta Support
My SAML Service Provider uses HTTPS. When configuring the application in Okta, I provided the https url in the "Single Sign On URL"...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found