Enabling the Address attribute in the SubjectConfirmationData element
0 views
Skip to first unread message
Dave Rager
unread,
Oct 10, 2025, 2:17:03 AM (11 days ago) Oct 10
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to simple...@googlegroups.com
I'm setting up SimpleSAMLphp as an IDP. Everything is mostly working
except in the SubjectConfirmationData I cannot figure out how to
enable the Address attribute.
From the spec:
It MAY contain an Address attribute limiting the client address
from which the assertion can be delivered.
Indeed, I want to do that.
I see support for the attribute in the source code though I cannot
find documentation about it. I don’t see anywhere in the source that
it actually gets set. (Outside reading an incoming response).
What configuration setting do I need to enable this attribute or is it
supported only to handle it in incoming responses?