Allow different times between IDP and SP machines

We were having an issue because there was a difference of about 11
seconds between the local times of our machines and the time of the IDP
server. Since right now we can't guarantee the time of these machines is
fully synchronized, for now we're adding a margin of error of one
minute.
This commit is contained in:
Javi Martín
2022-06-29 20:55:32 +02:00
parent a4709f9da0
commit 6190d808ba

View File

@@ -289,7 +289,8 @@ Devise.setup do |config|
config.omniauth :saml,
sp_entity_id: Rails.application.secrets.saml_sp_entity_id,
idp_cert: Rails.application.secrets.saml_idp_cert,
idp_sso_service_url: Rails.application.secrets.saml_idp_sso_service_url
idp_sso_service_url: Rails.application.secrets.saml_idp_sso_service_url,
allowed_clock_drift: 1.minute
# ==> Warden configuration
# If you want to use other strategies, that are not supported by Devise, or