<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>SAML on Luke Hebert</title><link>https://lukehebert.com/tag/saml/</link><description>Recent content in SAML on Luke Hebert</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Mon, 11 Sep 2023 00:00:00 +0000</lastBuildDate><atom:link href="https://lukehebert.com/tag/saml/index.xml" rel="self" type="application/rss+xml"/><item><title>The Beer Drinker's Guide to SAML Duo Security</title><link>https://lukehebert.com/post/the-beer-drinkers-guide-to-saml-duo-security/</link><pubDate>Mon, 11 Sep 2023 00:00:00 +0000</pubDate><guid>https://lukehebert.com/post/the-beer-drinkers-guide-to-saml-duo-security/</guid><description>A plain-English walkthrough of how SAML authentication works, using the analogy of buying a beer at a concert. Covers IdP and SP configuration, IdP-initiated vs SP-initiated flows, and practical troubleshooting steps.</description></item><item><title>Identity Crisis: SAML Rejecting Improper URIs</title><link>https://lukehebert.com/post/id4262-the-saml-nameidentifier-user-is-of-format-urnoasisname/</link><pubDate>Tue, 29 Mar 2022 00:00:00 +0000</pubDate><guid>https://lukehebert.com/post/id4262-the-saml-nameidentifier-user-is-of-format-urnoasisname/</guid><description>The ID4262 error occurs when a SAML NameIdentifier uses the entity format but contains an invalid URI. Two resolution steps fix the issue within your identity provider configuration.</description></item><item><title>SAML Custom Attributes in Hue</title><link>https://lukehebert.com/post/saml-custom-attributes-in-hue/</link><pubDate>Fri, 21 Jul 2017 00:00:00 +0000</pubDate><guid>https://lukehebert.com/post/saml-custom-attributes-in-hue/</guid><description>Hue returns a Permission Denied error when the IDP sends custom SAML attributes that pysaml2 cannot map. This guide walks through creating an attribute mapping file and configuring Hue to resolve the issue.</description></item></channel></rss>