Help Center

Menu

auth.saml.algorithm

Specify the SAML signature/digest algorithm name to use with OpenSAML.

Key: auth.saml.algorithm
Type: SAMLAlgorithm allowed values: sha1 or sha256
Can be set in: global.cfg

Description

Specify the SAML signature/digest algorithm name to use with OpenSAML. This setting applies to both public and administration interfaces.

The only currently permitted values are sha1 (the default for legacy reasons) and sha256 (the recommended value for security which is compatible with most modern IdPs).

Default Value

auth.saml.algorithm=sha1

Examples

Set the signature/digest algorithm to sha256 (compatible with ADFS)

auth.saml.algorithm=sha256