From 7d72a7e1ecb9266d69d1fc673f1534c606659a75 Mon Sep 17 00:00:00 2001 From: Guy Halse <guy@tenet.ac.za> Date: Tue, 16 May 2017 11:36:06 +0200 Subject: [PATCH] Documentation for @mapgrady's patch for simplesamlphp/simplesamlphp#498 --- docs/simplesamlphp-reference-idp-remote.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/docs/simplesamlphp-reference-idp-remote.md b/docs/simplesamlphp-reference-idp-remote.md index af324ef4d..9d46826b0 100644 --- a/docs/simplesamlphp-reference-idp-remote.md +++ b/docs/simplesamlphp-reference-idp-remote.md @@ -104,6 +104,15 @@ SAML 2.0 options The following SAML 2.0 options are available: +`disable_scoping` +: Whether sending of samlp:Scoping elements in authentication requests should be suppressed. The default value is `FALSE`. + When set to `TRUE`, no scoping elements will be sent. This does not comply with the SAML2 specification, but allows + interoperability with ADFS which [does not support Scoping elements](https://docs.microsoft.com/en-za/azure/active-directory/develop/active-directory-single-sign-on-protocol-reference#scoping). + +: Note that this option also exists in the SP configuration. This + entry in the IdP-remote metadata overrides the option in the + [SP configuration](./saml:sp). + `encryption.blacklisted-algorithms` : Blacklisted encryption algorithms. This is an array containing the algorithm identifiers. -- GitLab