[GUACAMOLE-1565] specify private key to decrypt SAML responses

• Type: New Feature
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 1.4.0
• Component/s: guacamole-auth-saml
• Flags: Patch
• Assignee: Unassigned
• Reporter: Vieri
• Created: 27/Mar/22 15:27
• Updated: 29/Nov/23 22:09

Description

Current SAML module implementation does not support decrypting SAML responses as it does not pass the private key information to onelogin lib.

 

With the trivial patch I'm attaching Guacamole can read the private key file and pass it to onelogin when the user adds something like the following to guacamole.properties:

saml-private-key-file: /etc/ssl/tomcat/server.key