Allow different times between IDP and SP machines
We were having an issue because there was a difference of about 11 seconds between the local times of our machines and the time of the IDP server. Since right now we can't guarantee the time of these machines is fully synchronized, for now we're adding a margin of error of one minute.
This commit is contained in:
@@ -289,7 +289,8 @@ Devise.setup do |config|
|
||||
config.omniauth :saml,
|
||||
sp_entity_id: Rails.application.secrets.saml_sp_entity_id,
|
||||
idp_cert: Rails.application.secrets.saml_idp_cert,
|
||||
idp_sso_service_url: Rails.application.secrets.saml_idp_sso_service_url
|
||||
idp_sso_service_url: Rails.application.secrets.saml_idp_sso_service_url,
|
||||
allowed_clock_drift: 1.minute
|
||||
|
||||
# ==> Warden configuration
|
||||
# If you want to use other strategies, that are not supported by Devise, or
|
||||
|
||||
Reference in New Issue
Block a user