diff --git a/plugins/auth-backend/config.d.ts b/plugins/auth-backend/config.d.ts index e9f24382d9..537999b694 100644 --- a/plugins/auth-backend/config.d.ts +++ b/plugins/auth-backend/config.d.ts @@ -53,6 +53,7 @@ export interface Config { decryptionPvk?: string; signatureAlgorithm?: 'sha256' | 'sha512'; digestAlgorithm?: string; + acceptedClockSkewMs: number; }; okta?: { [authEnv: string]: { [key: string]: string }; diff --git a/plugins/auth-backend/src/providers/saml/provider.ts b/plugins/auth-backend/src/providers/saml/provider.ts index fa8519ea1a..fe721fa376 100644 --- a/plugins/auth-backend/src/providers/saml/provider.ts +++ b/plugins/auth-backend/src/providers/saml/provider.ts @@ -132,6 +132,7 @@ export const createSamlProvider = ( | SignatureAlgorithm | undefined, digestAlgorithm: config.getOptionalString('digestAlgorithm'), + acceptedClockSkewMs: config.getOptionalNumber('acceptedClockSkewMs'), tokenIssuer, appUrl: globalConfig.appUrl,