Skip to content

Latest commit

 

History

History
27 lines (16 loc) · 1.17 KB

_saml-sp-limitations.mdx

File metadata and controls

27 lines (16 loc) · 1.17 KB
Raw

import InlineField from 'src/components/InlineField.astro'; import Aside from 'src/components/Aside.astro';

FusionAuth supports SAML both as a SAML Identity Provider (IdP) and as a Service Provider (SP). The SP implementation has certain limitations.

Version 2.0 is supported; other SAML versions are unsupported.

FusionAuth supports the following NameID format values by default:

  • urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
  • urn:oasis:names:tc:SAML:2.0:nameid-format:persistent

You may also provide your own format name. To determine the correct value, please examine the supported values of the software package for which you are configuring FusionAuth as the SP.

Map between SAML claims and user claims using a reconcile lambda or FusionAuth SAMLv2 Identity Provider configuration.

Prior to version `1.28.0`, FusionAuth only supported using the name Id for the user's email address.

FusionAuth supports the following SAMLv2 bindings:

  • HTTP Redirect
  • HTTP POST

Other bindings are not supported.