external-auth-server
external-auth-server copied to clipboard
Idea: Google Integration via SAML
Do you think it would be possible to integrate an app secured by eas as a SAML app into Googles GSuite?
Here's a start page for the Google SAML side: https://support.google.com/a/answer/6087519?hl=en
I fiddled around (without knowing what SAML is) and managed to add my app-icon to the google application launcher menu. (But to be honest: my app is not an app to be offered on the Marketplace. Otherwise, we would have done this in the first place. It would just be cool to have a working icon in the launcher.)

When I click it, Google sends a post with form-data to mydomain which my app/eas don't handle. Maybe they could? Would be extremely cool.
Here's a screenshot of the network tab:

I don't know much about saml, but another plugin is certainly a viable option. I'd have to do some reading on saml to know how good of a fit it is.
saml would pretty much be a reproduction of the oauth2/oidc plugins. It can/could be done but isn't a high-priority for me currently given the coverage provided by the other 2. I'll leave this open for further discussion however.
I've done quite some research on this... and yes oidc and saml basically cover 99% the same features by now. With a provider like keycloak it would be relatively easy to combine SAML and oidc connect idp's and SP's in any combination you can think of 👍
What needs to be done for that?