From 8d6a8d6366397750fdb9cdbe0c02f2c33b712f1b Mon Sep 17 00:00:00 2001 From: Ben Banfield-Zanin Date: Fri, 5 Mar 2021 10:14:35 +0000 Subject: [PATCH 1/2] Add additional SAML2 upgrade notes --- UPGRADE.rst | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/UPGRADE.rst b/UPGRADE.rst index 031e02bda9e2..8bc2ff91ab2d 100644 --- a/UPGRADE.rst +++ b/UPGRADE.rst @@ -124,6 +124,13 @@ This version changes the URI used for callbacks from OAuth2 and SAML2 identity p need to add ``[synapse public baseurl]/_synapse/client/saml2/authn_response`` as a permitted "ACS location" (also known as "allowed callback URLs") at the identity provider. + The "Issuer" in the "AuthnRequest" to the SAML2 identity provider is also updated to + ``[synapse public baseurl]/_synapse/client/saml2/metadata.xml``. If your SAML2 identity + provider uses this property to validate or otherwise identify Synapse, its configuration + will need to be updated to use the new URL. Alternatively you could create a new, separate + "EntityDescriptor" in your SAML2 identity provider with the new URLs and leave the URLs in + the existing "EntityDescriptor" as they were. + Changes to HTML templates ------------------------- From 4e8cfe9224a1159eb3dd51b69e2111d02bc6450b Mon Sep 17 00:00:00 2001 From: Ben Banfield-Zanin Date: Fri, 5 Mar 2021 10:19:53 +0000 Subject: [PATCH 2/2] Newsfile --- changelog.d/9550.doc | 1 + 1 file changed, 1 insertion(+) create mode 100644 changelog.d/9550.doc diff --git a/changelog.d/9550.doc b/changelog.d/9550.doc new file mode 100644 index 000000000000..adbbeb0ae437 --- /dev/null +++ b/changelog.d/9550.doc @@ -0,0 +1 @@ +Improve the SAML2 upgrade notes for 1.27.0.