external-auth-server icon indicating copy to clipboard operation
external-auth-server copied to clipboard

Idea: Google Integration via SAML

Open kettenbach-it opened this issue 5 years ago • 4 comments
trafficstars

Do you think it would be possible to integrate an app secured by eas as a SAML app into Googles GSuite?

Here's a start page for the Google SAML side: https://support.google.com/a/answer/6087519?hl=en

I fiddled around (without knowing what SAML is) and managed to add my app-icon to the google application launcher menu. (But to be honest: my app is not an app to be offered on the Marketplace. Otherwise, we would have done this in the first place. It would just be cool to have a working icon in the launcher.)

image

When I click it, Google sends a post with form-data to mydomain which my app/eas don't handle. Maybe they could? Would be extremely cool.

Here's a screenshot of the network tab:

image image

kettenbach-it avatar Mar 03 '20 21:03 kettenbach-it

I don't know much about saml, but another plugin is certainly a viable option. I'd have to do some reading on saml to know how good of a fit it is.

travisghansen avatar Mar 03 '20 22:03 travisghansen

saml would pretty much be a reproduction of the oauth2/oidc plugins. It can/could be done but isn't a high-priority for me currently given the coverage provided by the other 2. I'll leave this open for further discussion however.

travisghansen avatar Mar 07 '20 05:03 travisghansen

I've done quite some research on this... and yes oidc and saml basically cover 99% the same features by now. With a provider like keycloak it would be relatively easy to combine SAML and oidc connect idp's and SP's in any combination you can think of 👍

PrivatePuffin avatar Sep 20 '20 15:09 PrivatePuffin

What needs to be done for that?

kettenbach-it avatar Sep 20 '20 16:09 kettenbach-it