fix: enable IDP initiated SAML logins

Unix4ever · Unix4ever · commit 651d98ea23da · 2025-02-05T10:40:21.000+03:00
Should probably help with logging into the system initiated from the
SAML apps Google drawer.

Signed-off-by: Artem Chernyshev &lt;artem.chernyshev@talos-systems.com&gt;
diff --git a/internal/backend/saml/saml.go b/internal/backend/saml/saml.go
@@ -38,9 +38,10 @@ func NewHandler(state state.State, cfg *specs.AuthConfigSpec_SAML, logger *zap.L
 	}
 
 	opts := samlsp.Options{
-		URL:            *rootURL,
-		IDPMetadata:    idpMetadata,
-		LogoutBindings: []string{saml.HTTPPostBinding},
+		URL:               *rootURL,
+		IDPMetadata:       idpMetadata,
+		LogoutBindings:    []string{saml.HTTPPostBinding},
+		AllowIDPInitiated: true,
 	}
 
 	serviceProvider := samlsp.DefaultServiceProvider(opts)

Original file line number	Diff line number	Diff line change
`@@ -38,9 +38,10 @@ func NewHandler(state state.State, cfg specs.AuthConfigSpec_SAML, logger zap.L`
`38`	`38`	`}`
`39`	`39`
`40`	`40`	`opts := samlsp.Options{`
`41`		`- URL: *rootURL,`
`42`		`- IDPMetadata: idpMetadata,`
`43`		`- LogoutBindings: []string{saml.HTTPPostBinding},`
	`41`	`+ URL: *rootURL,`
	`42`	`+ IDPMetadata: idpMetadata,`
	`43`	`+ LogoutBindings: []string{saml.HTTPPostBinding},`
	`44`	`+ AllowIDPInitiated: true,`
`44`	`45`	`}`
`45`	`46`
`46`	`47`	`serviceProvider := samlsp.DefaultServiceProvider(opts)`