Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Some improvements for the documentation. #393

Merged
merged 4 commits into from
Dec 27, 2023
Merged
Show file tree
Hide file tree
Changes from 3 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 4 additions & 2 deletions docs/source/_templates/pplnx_template/layout.html
Original file line number Diff line number Diff line change
Expand Up @@ -44,9 +44,11 @@
<!-- MOBILE TOP BAR OVERLOAD -->
{% block mobile_nav %}
<i data-toggle="wy-nav-top" class="fa fa-bars"></i>
{% if logo %}
<a href="{{ pathto(master_doc) }}">
<img src="{{ pathto('_static/' + logo, 1) }}" class="logo" alt="Logo"/>
</a>
<img src="{{ pathto('_static/' + logo, 1) }}" class="logo" alt="Logo"/>
</a>
{% endif %}
<a href="{{ pathto(master_doc) }}">
{{ project }}
</a>
Expand Down
10 changes: 5 additions & 5 deletions docs/source/contents/setup.rst
Original file line number Diff line number Diff line change
Expand Up @@ -202,13 +202,13 @@ see AARC Blueprint specs `here <https://zenodo.org/record/4596667/files/AARC-G06

IdP scoping
===========
The SP can suggest an IdP to a proxy by using the Scoping and IDPList elements in a SAML AuthnRequest. This is done using the `scoping` parameter to the login URL.
The SP can suggest an IdP to a proxy by using the Scoping and IDPList elements in a SAML AuthnRequest. This is done using the `scoping` parameter to the login URL. ::

``https://sp.example.org/saml2/login/?scoping=https://idp.example.org``
https://sp.example.org/saml2/login/?scoping=https://idp.example.org

This parameter can be combined with the IdP parameter if multiple IdPs are present in the metadata, otherwise the first is used.
This parameter can be combined with the IdP parameter if multiple IdPs are present in the metadata, otherwise the first is used. ::

``https://sp.example.org/saml2/login/?scoping=https://idp.example.org&idp=https://proxy.example.com/metadata``
https://sp.example.org/saml2/login/?scoping=https://idp.example.org&idp=https://proxy.example.com/metadata

Currently there is support for a single IDPEntry in the IDPList.

Expand Down Expand Up @@ -243,7 +243,7 @@ setting::
SAML_CONFIG_LOADER = 'python.path.to.your.callable'

Bearer Assertion Replay Attack Prevention
==================================
=========================================
In SAML standard doc, section 4.1.4.5 it states

The service provider MUST ensure that bearer assertions are not replayed, by maintaining the set of used ID values for the length of time for which the assertion would be considered valid based on the NotOnOrAfter attribute in the <SubjectConfirmationData>
Expand Down