summaryrefslogtreecommitdiffstats
path: root/docs/simplesamlphp-reference-idp-hosted.txt
diff options
context:
space:
mode:
Diffstat (limited to 'docs/simplesamlphp-reference-idp-hosted.txt')
-rw-r--r--docs/simplesamlphp-reference-idp-hosted.txt10
1 files changed, 10 insertions, 0 deletions
diff --git a/docs/simplesamlphp-reference-idp-hosted.txt b/docs/simplesamlphp-reference-idp-hosted.txt
index b2d14ba..b2a708e 100644
--- a/docs/simplesamlphp-reference-idp-hosted.txt
+++ b/docs/simplesamlphp-reference-idp-hosted.txt
@@ -234,6 +234,16 @@ The following SAML 2.0 options are available:
any value in the SP-remote metadata overrides the one configured
in the IdP metadata.
+`signature.algorithm`
+: The algorithm to use when signing any message generated by this identity provider. Defaults to RSA-SHA1.
+: Possible values:
+
+ * `http://www.w3.org/2000/09/xmldsig#rsa-sha1`
+ *Note*: the use of SHA1 is **deprecated** and will be disallowed in the future.
+ * `http://www.w3.org/2001/04/xmldsig-more#rsa-sha256`
+ * `http://www.w3.org/2001/04/xmldsig-more#rsa-sha384`
+ * `http://www.w3.org/2001/04/xmldsig-more#rsa-sha512`
+
`validate.authnrequest`
: Whether we require signatures on authentication requests sent to this IdP.