Merge branch 'main' into saml-provider-metadata-parser

update tests
providers/saml: Properly import audience from metadata.
2026-05-15 11:26:31 +02:00 · 2026-05-09 07:16:56 -05:00 · 2026-05-09 06:29:47 -05:00 · 2026-05-09 06:03:31 -05:00
2 changed files with 2 additions and 1 deletions
--- a/authentik/providers/saml/processors/metadata_parser.py
+++ b/authentik/providers/saml/processors/metadata_parser.py
@@ -53,6 +53,7 @@ class ServiceProviderMetadata:
        )
        provider.sp_binding = self.acs_binding
        provider.acs_url = self.acs_location
+        provider.audience = self.entity_id
        provider.default_name_id_policy = self.name_id_policy
        # Single Logout Service
        if self.sls_location:
--- a/authentik/providers/saml/tests/test_metadata.py
+++ b/authentik/providers/saml/tests/test_metadata.py
@@ -103,7 +103,7 @@ class TestServiceProviderMetadataParser(TestCase):
            provider.verification_kp.certificate_data, load_fixture("fixtures/cert.pem")
        )
        self.assertIsNotNone(provider.signing_kp)
-        self.assertEqual(provider.audience, "")
+        self.assertEqual(provider.audience, "http://localhost:8080/apps/user_saml/saml/metadata")

    def test_with_signing_cert_invalid_signature(self):
        """Test Metadata with signing cert (invalid signature)"""
Author	SHA1	Message	Date
Connor Peshek	c4f1a1b118	Merge branch 'main' into saml-provider-metadata-parser	2026-05-09 07:16:56 -05:00
Connor Peshek	11cc78e751	update tests	2026-05-09 06:29:47 -05:00
Connor Peshek	22ace95a82	providers/saml: Properly import audience from metadata.	2026-05-09 06:03:31 -05:00