Set disableRequestedAuthnContext in SAML strategy

FlowFuse · Feb 27, 2024 · 1df752d · 1df752d
1 parent d281b22
commit 1df752d
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/forge/ee/routes/sso/auth.js b/forge/ee/routes/sso/auth.js
@@ -34,6 +34,7 @@ module.exports = fp(async function (app, opts) {
 
     fastifyPassport.use(new MultiSamlStrategy({
         passReqToCallback: true, // makes req available in callback,
+        disableRequestedAuthnContext: true, // Helps make things work with Entra
         wantAssertionsSigned: false, // TODO: allow this to be set per provider
         async getSamlOptions (request, done) {
             if (request.body?.RelayState) {