Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

IdP-initiated SSO Behavior rejects request after creation via terraform #971

Open
6 tasks done
abogacz-tl opened this issue Jun 5, 2024 · 0 comments
Open
6 tasks done
Labels
🪲 bug Something isn't working

Comments

@abogacz-tl
Copy link

abogacz-tl commented Jun 5, 2024

Checklist

  • I have looked into the README and have not found a suitable solution or answer.
  • I have looked into the documentation and have not found a suitable solution or answer.
  • I have searched the issues and have not found a suitable solution or answer.
  • I have upgraded to the latest version of this provider and the issue still persists.
  • I have searched the Auth0 Community forums and have not found a suitable solution or answer.
  • I agree to the terms within the Auth0 Code of Conduct.

Description

I am creating SSO connection via terraform including IDP initiated sso configuration, after it's created it remains in reject requests state:
image

enabled flag for idp initiated object is not allowed, and i don't see other option to switch idp initiated sso behaviour to accept requests.

The way how I create connection:

resource "auth0_connection" "saml_idp" {
  name                 = "SAML-IdP-TF"
  strategy             = "samlp"
  is_domain_connection = false
  show_as_button       = true
  display_name         = "IDP SSO"
  options {
    debug = false
    fields_map = jsonencode({
      email   = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier"
      user_id = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier"
    })
    idp_initiated {
      client_protocol        = "oauth2"
      client_authorize_query = "redirect_uri=${urlencode("https://example.com")}"
    }
    sign_in_endpoint  = "https://example.com"
    sign_saml_request = true
    signing_cert      = "-----BEGIN CERTIFICATE----------END CERTIFICATE-----"
  }
}

Expectation

There should be a way of switching on accept request on new created connection.

Reproduction

  1. Create saml connection via terraform
  2. Add idp initiated sso configuration
  3. Observe that even while config is stored idp initiated sso is in disabled state

Auth0 Terraform Provider version

1.2.0

Terraform version

1.7.5

@abogacz-tl abogacz-tl added the 🪲 bug Something isn't working label Jun 5, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
🪲 bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant