Uploaded image for project: 'Crowd'
  1. Crowd
  2. CWD-5646

Allow Customer to add non-registered domain names in Assertion Consumer Service URL in SSO2.0 config

    XMLWordPrintable

    Details

    • Type: Suggestion
    • Status: Gathering Interest (View Workflow)
    • Resolution: Unresolved
    • Fix Version/s: None
    • Component/s: SSO
    • Labels:
      None
    • Feedback Policy:

      Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      Description

      Crowd uses apache.commons.validator to validate the URL in the Assertion Consumer Service field and if the domain name is not registered as a Top-level domain with IANA, the validation will fail to result in an invalid URL error.
      As the crowd can be used internally, there is no guarantee that the domain name would be always registered so we need a way to let the customer override this.

      Workaround
      The current workaround is to manipulate this configuration from the database by updating cwd_application_saml_config.

        Attachments

          Activity

            People

            Assignee:
            Unassigned Unassigned
            Reporter:
            akotha@atlassian.com Ashish Kotha
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated: