Allow SAML logins

[tarkatronic]

I would like to be able to provision users in our Sentry application via SAML, rather than having to go in and manually create users. I'm currently doing this, for example, with AWS. Everybody uses the same link to go to our AWS console, is automatically logged in, and is given permissions depending on group membership defined in our SAML provider (in this case, LastPass.)

[jaysoffian]

You can do this by overridding the user class... you' may need to write your own, though there is probably something that already works with django. I sent in a patch a couple weeks ago that will then let you tell sentry that such users are externally managed, which will disable their ability to edit their username, password, etc from within sentry.

[jaysoffian]

You'll have to do some digging, but it should be doable:

http://stackoverflow.com/questions/22668434/saml-with-django-authentication

[jaysoffian]

Yeah, I think using djangosaml2 and jaysoffian@c5f224a you can do what you want.

[tarkatronic]

Ah, I should have mentioned, I was hoping that this would be possible on hosted Sentry.

Sooooo.... I'm guessing that's a no, then? :-)

[dcramer]

Closing in favor of GH-1372 which is now actively being worked on