diff options
| author | Ben Banfield-Zanin <benbz@matrix.org> | 2021-03-05 12:07:50 +0000 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-03-05 12:07:50 +0000 |
| commit | e5da770ccea03bc386c476913951ee220d5cf04e (patch) | |
| tree | 6525b0f87374d0b6c04aa4ea144ba5d13b455cbd | |
| parent | Replace `last_*_pdu_age` metrics with timestamps (#9540) (diff) | |
| download | synapse-e5da770ccea03bc386c476913951ee220d5cf04e.tar.xz | |
Add additional SAML2 upgrade notes (#9550)
| -rw-r--r-- | UPGRADE.rst | 7 | ||||
| -rw-r--r-- | changelog.d/9550.doc | 1 |
2 files changed, 8 insertions, 0 deletions
diff --git a/UPGRADE.rst b/UPGRADE.rst index 031e02bda9..8bc2ff91ab 100644 --- a/UPGRADE.rst +++ b/UPGRADE.rst @@ -124,6 +124,13 @@ This version changes the URI used for callbacks from OAuth2 and SAML2 identity p need to add ``[synapse public baseurl]/_synapse/client/saml2/authn_response`` as a permitted "ACS location" (also known as "allowed callback URLs") at the identity provider. + The "Issuer" in the "AuthnRequest" to the SAML2 identity provider is also updated to + ``[synapse public baseurl]/_synapse/client/saml2/metadata.xml``. If your SAML2 identity + provider uses this property to validate or otherwise identify Synapse, its configuration + will need to be updated to use the new URL. Alternatively you could create a new, separate + "EntityDescriptor" in your SAML2 identity provider with the new URLs and leave the URLs in + the existing "EntityDescriptor" as they were. + Changes to HTML templates ------------------------- diff --git a/changelog.d/9550.doc b/changelog.d/9550.doc new file mode 100644 index 0000000000..adbbeb0ae4 --- /dev/null +++ b/changelog.d/9550.doc @@ -0,0 +1 @@ +Improve the SAML2 upgrade notes for 1.27.0. |