Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add SAML authentication with secure checks #2270

Closed
wants to merge 35 commits into from

Conversation

RomanKosovnenko
Copy link

@RomanKosovnenko RomanKosovnenko commented Nov 9, 2020

This is a reimplementation of #185 that is based on #1334 on the current master. (related FR: #1253)

The main differences:

  • It supports security checks like a request/response signature validation.
  • Support of the Single Sign On & Single Log Out
  • Roles mapping
  • Redirection after log out

This implementation works well in our project. And we would like to make it available to others. Even if it will not be merged.

yol and others added 30 commits April 20, 2020 15:47
- Add SAML to DE localization
- Move to custom docker image of the greenlight
- Add examples of env variables
Add ENV variable to change SAML auth callback function
Co-authored-by: rko <roman.kosovnenko@intecsoft.de>
* Change SAML btn color to primary

* Update readme

Co-authored-by: rko <roman.kosovnenko@intecsoft.de>
* Logout redirect

Co-authored-by: rko <roman.kosovnenko@intecsoft.de>
* Separate SAML documentation and README

* fixes according review

Co-authored-by: rko <roman.kosovnenko@intecsoft.de>
* Add documentation about the DB configuration
SP certificates for request signature

* Added sertificate to signin the requests from the SP.
* Add env variable for filenames of the certificate and private key.

* Signature properties

* Add a bit more documentation

* even more documentation

Co-authored-by: rko <roman.kosovnenko@intecsoft.de>
* Add IdP initiated logout
* add env variable
Co-authored-by: rko <roman.kosovnenko@intecsoft.de>
* Update IdP certificate settings to IdP certificate file

* Change omniauth-saml to fixed version by intecsoft

* Add test-idp-certificate

* Added additional documentation about the IdP's certificate

* update omniauth- and ruby-saml to the latest versions

Co-authored-by: rko <roman.kosovnenko@intecsoft.de>
Co-authored-by: rko <roman.kosovnenko@intecsoft.de>
* fix documentation

* Enhance grammar in the Readme.md

Fixing some spelling and grammar error in the documentation.

Co-authored-by: rko <roman.kosovnenko@intecsoft.de>
Co-authored-by: K0nstantine <kostiantyn.shalbanov@intecsoft.de>
Co-authored-by: rko <roman.kosovnenko@intecsoft.de>
Fix docs for SAML_IDP_SLO_URL
@coveralls
Copy link

coveralls commented Nov 9, 2020

Coverage Status

Coverage decreased (-0.01%) to 90.408% when pulling 0d3d0c2 on intecsoft:SAML into 81907d0 on bigbluebutton:master.

@farhatahmad
Copy link
Collaborator

See #1334 (comment)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

5 participants