diff --git a/Documentation/saml-connector.md b/Documentation/saml-connector.md index 28800463..eaadffa1 100644 --- a/Documentation/saml-connector.md +++ b/Documentation/saml-connector.md @@ -12,7 +12,7 @@ There are known issues with the XML signature validation for this connector. In The connector doesn't support signed AuthnRequests or encrypted attributes. -The connector doesn't support refresh tokens since the SAML 2.0 protocol doesn't provide a way to requery a provider without interaction. +The connector doesn't support refresh tokens since the SAML 2.0 protocol doesn't provide a way to requery a provider without interaction. Ensure that the "offline_access" scope is not requested in client apps. ## Configuration @@ -34,7 +34,7 @@ connectors: # CA's can also be provided inline as a base64'd blob. # - # catData: ( RAW base64'd PEM encoded CA ) + # caData: ( RAW base64'd PEM encoded CA ) # To skip signature validation, uncomment the following field. This should # only be used during testing and may be removed in the future.