Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Where is the SAML config? #786

Closed
zner0L opened this issue Apr 21, 2023 · 3 comments
Closed

Where is the SAML config? #786

zner0L opened this issue Apr 21, 2023 · 3 comments

Comments

@zner0L
Copy link

zner0L commented Apr 21, 2023

I am trying to set up SAML to authorize users with my Keycloak, but I can't find any documentation on it. I can see how it is done in https://github.com/CatoTH/antragsgruen/tree/main/plugins/gruene_de_saml, which should be easy enough to copy and adapt, but I don‘t understand how SimpleSAML gets the SAML config. Shouldn't there be an authsources.php somewhere? I would appreciate your help, if you can spare the time.

Thank you so much for keeping this project open source. It is really helpful!

@CatoTH
Copy link
Owner

CatoTH commented Apr 22, 2023

The location can be configured by the SIMPLESAMLPHP_CONFIG_DIR environment variable, which can be set e.g. in the nginx configuration: https://github.com/CatoTH/antragsgruen/blob/main/docs/simplesaml-nginx.conf#L28

And yes, there needs to be a authsources.php, a config.php and saml20-idp-remote.php .

Honestly, setting up SAML always was somewhat tricky and somehow different every single time depending on so many factors that I didn't dare to write a authorative documentation yet. For those installations using it against a Keycloak server, I usually did some client-specific implementation (as seen in the plugin-directory. though gruene_ch_saml might be the easier basis to start from)

@lukas-staab
Copy link
Contributor

I also want to connect a keycloak to it. Have you started allready / do you have a PR at hand @zner0L ?

@CatoTH
Copy link
Owner

CatoTH commented Oct 29, 2023

I'm closing this. because apparently you have figured it out (according to #822)

@CatoTH CatoTH closed this as completed Oct 29, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants