Extra SAML2 configuration options

[laerm]

More SAML2 configuration options
The basic SAML2 configuration works as expected. In some cases however, more advanced settings need to be configured, such as SAML cert and key.

Adding more options to the env file, such as nameID format, SP key and cert would make such advanced settings easier to implement.

At the moment, one could use the SAML2_ONELOGIN_OVERRIDES parameter, but I'm having trouble overriding the current settings.

I tried

SAML2_ONELOGIN_OVERRIDES={"NameIDFormat":"urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"}

with no luck.

Thanks for all your hard work!

[ssddanbrown]

Hi @laerm,
As of v21.10, there are now options for SAML2 SP cert and key: https://www.bookstackapp.com/docs/admin/saml2-auth/

In regards to overrides, they're merged at a whole config onelogin level, so assuming the nameid format was for the service provider, it's be something like:

SAML2_ONELOGIN_OVERRIDES={"sp":{"NameIDFormat":"urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"}}