ShelfSSOSaml
Defined in: packages/auth/src/engine.ts:145
SAML SSO connection (samlify via the SSO plugin; never hand-rolled XML).
Properties
Section titled “Properties”audience?
Section titled “audience?”
optionalaudience?:string
Defined in: packages/auth/src/engine.ts:157
Expected audience (defaults to the SP issuer).
optionalcert?:string|string[]
Defined in: packages/auth/src/engine.ts:151
IdP signing cert(s), PEM (ignored when metadataXml is set).
entityID?
Section titled “entityID?”
optionalentityID?:string
Defined in: packages/auth/src/engine.ts:155
IdP entity ID (required without metadataXml).
entryPoint
Section titled “entryPoint”entryPoint:
string
Defined in: packages/auth/src/engine.ts:149
IdP SSO URL (required by the plugin type; unused when metadataXml is set).
issuer
Section titled “issuer”issuer:
string
Defined in: packages/auth/src/engine.ts:147
SP entity ID (our audience; also the metadata default).
metadataXml?
Section titled “metadataXml?”
optionalmetadataXml?:string
Defined in: packages/auth/src/engine.ts:153
IdP metadata XML (preferred: carries entity ID, endpoints, and certs).
wantAssertionsSigned?
Section titled “wantAssertionsSigned?”
optionalwantAssertionsSigned?:boolean
Defined in: packages/auth/src/engine.ts:159
Reject unsigned assertions. Defaults to false.