漏洞
When using the Secutity Assertion Markup Language (SAML) authentication in ArcGIS Online and Portal for ArcGIS, the SAML request specifies the NameID format as urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified in the NameIDPolicy section instead of SAML:2.0.
| 漏洞 ID 编号 | BUG-000114084 |
|---|---|
| 已提交 | May 18, 2018 |
| 上次修改时间 | June 5, 2024 |
| 适用范围 | ArcGIS Online |
| 找到的版本 | 6.1 |
| 状态 | Will Not Be Addressed |
附加信息
As per the official specification document for SAML v2.0, the supported NAMEID identifier is still: urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified. The SAML v2.0 specification is available at https://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf.重现步骤
漏洞 ID: BUG-000114084
软件:
- ArcGIS Online
当漏洞状态发生变化时获得通知
发现关于本主题的更多内容
搜索相关信息
查找与此主题相关的培训
探索想法并提供反馈
获取来自 ArcGIS 专家的帮助
下载 Esri 支持应用程序