Skip to content

Lacking support for nested StatusCode #13

@hfern

Description

@hfern

When ADFS sends a Responder with StatusDenied, the payload looks like this:

<samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Responder">
        <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:RequestDenied" />
    </samlp:StatusCode>
</samlp:Status>

Note that there is a nested StatusCode within a parent StatusCode per MS-SAMLPR 3.1.4.7.2 Element <StatusCode>.

It seems that right now python-saml lacks support for this nesting ability. It seems that it's commented out here -- perhaps because there is no self-referencing ability at the current time?

Is there any plan to support nested StatusCodes? Alternatively, is there a suggested workaround?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions