From 8714a5902b1fe3383289add0b5a3020d05aff477 Mon Sep 17 00:00:00 2001
From: pwnslinger <mahmadi@sorenhq.com>
Date: Thu, 20 Nov 2025 03:48:20 -0800
Subject: [PATCH] Fix: Correct SAML config path in entrypoint script

- Fix entrypoint.sh to place SAML config under auth.saml instead of root level,
  resolving "SP certificate and private key are not configured" error

Fixes #541

Signed-off-by: pwnslinger <mahmadi@sorenhq.com>
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
---
 entrypoint.sh | 19 +++++++------------
 1 file changed, 7 insertions(+), 12 deletions(-)

diff --git a/entrypoint.sh b/entrypoint.sh
index 27827fe5e..3fac477ad 100644
--- a/entrypoint.sh
+++ b/entrypoint.sh
@@ -111,6 +111,13 @@ EOF
     password:
       pepper: "${AUTH_PASSWORD_PEPPER:?AUTH_PASSWORD_PEPPER is required}"
       iterations: ${AUTH_PASSWORD_ITERATIONS:-1000000}
+    saml:
+      session-duration: ${SAML_SESSION_DURATION:-604800}
+      cleanup-interval-seconds: ${SAML_CLEANUP_INTERVAL_SECONDS:-0}
+      certificate: |
+$(echo "${SAML_CERTIFICATE:-}" | sed 's/^/        /')
+      private-key: |
+$(echo "${SAML_PRIVATE_KEY:-}" | sed 's/^/        /')
 
   trust-auth:
     cookie-name: "${TRUST_AUTH_COOKIE_NAME:-TCT}"
@@ -178,18 +185,6 @@ EOF
 EOF
   fi
 
-  # Add SAML config if any SAML variable is configured
-    cat >> "$CONFIG_FILE" <<EOF
-
-saml:
-  session-duration: ${SAML_SESSION_DURATION:-604800}
-  cleanup-interval-seconds: ${SAML_CLEANUP_INTERVAL_SECONDS:-0}
-  certificate: |
-$(echo "${SAML_CERTIFICATE:-}" | sed 's/^/    /')
-  private-key: |
-$(echo "${SAML_PRIVATE_KEY:-}" | sed 's/^/    /')
-EOF
-
   echo "Configuration file generated at: $CONFIG_FILE"
 fi