feat(saml): add SignatureMethod config for SAML IDP (#10520)

# Which Problems Are Solved
When a SAML IDP is created, the signing algorithm defaults to
`RSA-SHA1`.
This PR adds the functionality to configure the signing algorithm while
creating or updating a SAML IDP. When nothing is specified, `RSA-SHA1`
is the default.

Available options:
* RSA_SHA1
* RSA_SHA256
* RSA_SHA512


# How the Problems Are Solved

By introducing a new optional config to specify the Signing Algorithm. 

# Additional Changes
N/A

# Additional Context
- Closes #9842 

An existing bug in the UpdateSAMLProvider API will be fixed as a
followup in a different
[PR](https://github.com/zitadel/zitadel/pull/10557).

---------

Co-authored-by: Stefan Benz <[email protected]>
This commit is contained in:
Gayathri Vijayan
2025-08-27 09:07:13 +00:00
committed by GitHub
co-authored by Stefan Benz
parent 6699a6f966
commit 255d42da65
42 changed files with 413 additions and 7 deletions
+1
View File
@@ -2373,6 +2373,7 @@
"METADATAURL": "Metadata URL",
"BINDING": "Binding",
"SIGNEDREQUEST": "Signed Request",
"SIGNATUREALGORITHM": "Signature Algorithm",
"NAMEIDFORMAT": "NameID Format",
"TRANSIENTMAPPINGATTRIBUTENAME": "Custom Mapping Attribute Name",
"TRANSIENTMAPPINGATTRIBUTENAME_DESC": "Alternative attribute name to map the user in case the `nameid-format` returned is `transient`, e.g. `http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress`"
+1
View File
@@ -2368,6 +2368,7 @@
"METADATAURL": "Metaadatok URL",
"BINDING": "Kötés",
"SIGNEDREQUEST": "Aláírt kérés",
"SIGNATUREALGORITHM": "Aláírási algoritmus",
"NAMEIDFORMAT": "NameID formátum",
"TRANSIENTMAPPINGATTRIBUTENAME": "Egyéni leképezési attribútumnév",
"TRANSIENTMAPPINGATTRIBUTENAME_DESC": "Alternatív attribútumnév a felhasználó leképezéséhez, ha a visszakapott `nameid-format` `transient`, pl. `http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress`"
+1
View File
@@ -2150,6 +2150,7 @@
"METADATAURL": "URL metadata",
"BINDING": "Mengikat",
"SIGNEDREQUEST": "Permintaan yang Ditandatangani",
"SIGNATUREALGORITHM": "Algoritma tanda tangan",
"NAMEIDFORMAT": "Format ID Nama",
"TRANSIENTMAPPINGATTRIBUTENAME": "Nama Atribut Pemetaan Khusus",
"TRANSIENTMAPPINGATTRIBUTENAME_DESC": "Nama atribut alternatif untuk memetakan pengguna jika `format nameid` yang dikembalikan adalah `sementara`, mis. `http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress`"
+1
View File
@@ -2370,6 +2370,7 @@
"METADATAURL": "Metadata URL",
"BINDING": "Binding",
"SIGNEDREQUEST": "署名付きリクエスト",
"SIGNATUREALGORITHM": "署名アルゴリズム",
"NAMEIDFORMAT": "NameIDフォーマット",
"TRANSIENTMAPPINGATTRIBUTENAME": "カスタム属性名",
"TRANSIENTMAPPINGATTRIBUTENAME_DESC": "NameIDフォーマットが`transient`の場合にユーザーをマッピングするためのカスタム属性名 (例: `http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress`)"
+1
View File
@@ -2370,6 +2370,7 @@
"METADATAURL": "메타데이터 URL",
"BINDING": "바인딩",
"SIGNEDREQUEST": "서명된 요청",
"SIGNATUREALGORITHM": "서명 알고리즘",
"NAMEIDFORMAT": "NameID 형식",
"TRANSIENTMAPPINGATTRIBUTENAME": "사용자 매핑 속성 이름",
"TRANSIENTMAPPINGATTRIBUTENAME_DESC": "`nameid-format`이 `transient`인 경우 사용자 매핑에 사용할 대체 속성 이름, 예: `http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress`"
+2 -1
View File
@@ -2369,7 +2369,8 @@
"METADATAXML": "Metadata Xml",
"METADATAURL": "Metadata URL",
"BINDING": "Binding",
"SIGNEDREQUEST": "Ondertekend Verzoek"
"SIGNEDREQUEST": "Ondertekend Verzoek",
"SIGNATUREALGORITHM": "Handtekeningalgoritme"
},
"TOAST": {
"SAVED": "Succesvol opgeslagen.",
+1
View File
@@ -2368,6 +2368,7 @@
"METADATAURL": "URL metadata",
"BINDING": "Legare",
"SIGNEDREQUEST": "Solicitare semnată",
"SIGNATUREALGORITHM": "Algoritm de semnătură",
"NAMEIDFORMAT": "Format ID nume",
"TRANSIENTMAPPINGATTRIBUTENAME": "Nume atribut mapare personalizat",
"TRANSIENTMAPPINGATTRIBUTENAME_DESC": "Nume alternativ de atribut pentru a mapa utilizatorul în cazul în care nameid-format returnat este tranzitoriu, de exemplu, http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"
+1
View File
@@ -2373,6 +2373,7 @@
"METADATAURL": "Metadata URL",
"BINDING": "Binding",
"SIGNEDREQUEST": "İmzalı İstek",
"SIGNATUREALGORITHM": "İmza algoritması",
"NAMEIDFORMAT": "NameID Formatı",
"TRANSIENTMAPPINGATTRIBUTENAME": "Özel Eşleme Özellik Adı",
"TRANSIENTMAPPINGATTRIBUTENAME_DESC": "`nameid-format` `transient` döndürülmesi durumunda kullanıcıyı eşlemek için alternatif özellik adı, örn. `http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress`"