Skip to content

Latest commit

 

History

History
58 lines (48 loc) · 2.37 KB

saml2-to-oidc.md

File metadata and controls

58 lines (48 loc) · 2.37 KB
Raw

Proxy: SAML2 <-> OpenID Connect

After following the installation instructions, the proxy must be configured with a SAML2 frontend and an OpenID Connect backend.

Configuration

  1. Copy the necessary base configurations from the <satosa_path>/example directory:

    mkdir -p saml2-oidc/plugins
cp example/{proxy_conf.yaml.example,internal_attributes.yaml.example} saml2-oidc/
cp example/plugins/frontends/saml2_frontend.yaml.example saml2-oidc/plugins/
cp example/plugins/backends/openid_backend.yaml.example saml2-oidc/plugins/

  2. Configure the proxy:

  3. Rename proxy_conf.yaml.example to proxy_conf.yaml:

    mv proxy_conf.yaml.example proxy_conf.yaml

  4. Edit the necessary proxy configuration parameters, see the SATOSA proxy configuration section of the proxy configuration instructions for more information. To specify the necessary plugins make sure to include the following configuration parameter values:

    BACKEND_MODULES:
  - saml2-oidc/plugins/openid_backend.yaml
FRONTEND_MODULES:
  - saml2-oidc/plugins/saml2_frontend.yaml

  5. Configure the attribute mapping:

  6. Rename internal_attributes.yaml.example to internal_attributes.yaml:

    mv internal_attributes.yaml.example internal_attributes.yaml

  7. Map the necessary attributes, see the Attribute mapping configuration section of the proxy configuration instructions for more information.

  8. Configure the plugins

  9. Rename plugins/saml2_frontend.yaml.example to plugins/saml2_frontend.yaml and plugins/openid_backend.yaml.example to plugins/openid_backend.yaml

    mv plugins/saml2_frontend.yaml.example plugins/saml2_frontend.yaml
mv plugins/openid_backend.yaml.example plugins/openid_backend.yaml

  10. Specify the necessary configuration parameters, see the Plugins section of the proxy configuration instructions for more information.

  11. Generate the SAML metadata, see the SAML metadata section of the proxy configuration instructions for more information.

  12. Start the proxy application, see the Running the proxy application section of the proxy configuration instructions for more information.