django-saml2-auth icon indicating copy to clipboard operation
django-saml2-auth copied to clipboard

ookta setup

Open phamj88 opened this issue 7 years ago • 1 comments

is there any more comprehensive guides? I am having a lot of issues with this.

setup exactly how the README says. When testing on my local runserver I get the redirect to ookta login then on the redirect it goes in an infinite loop on firefox with: image clicking continue just reloads and pops up again

Looking at the django log it is constantly looping:

Starting development server at http://0.0.0.0:8006/
Quit the server with CONTROL-C.
[10/Jan/2019 14:02:29] "GET / HTTP/1.1" 302 0
[10/Jan/2019 14:02:30] "GET /accounts/login/?next=/ HTTP/1.1" 302 0
[10/Jan/2019 14:02:32] "POST /saml2_auth/acs/ HTTP/1.1" 302 0
[10/Jan/2019 14:02:33] "GET /accounts/login/?next=/saml2_auth/acs/ HTTP/1.1" 302 0
[10/Jan/2019 14:02:34] "POST /saml2_auth/acs/ HTTP/1.1" 302 0
[10/Jan/2019 14:02:34] "GET /accounts/login/?next=/saml2_auth/acs/ HTTP/1.1" 302 0
[10/Jan/2019 14:02:36] "POST /saml2_auth/acs/ HTTP/1.1" 302 0
[10/Jan/2019 14:02:36] "GET /accounts/login/?next=/saml2_auth/acs/ HTTP/1.1" 302 0

On ookta side: image

Had to dig through issues to see that i should configure allow request to other SSos. And it still doesn't work.

Also authentication backend is default:

AUTHENTICATION_BACKENDS = (                                                                                             
'django.contrib.auth.backends.ModelBackend',
)

phamj88 avatar Jan 10 '19 20:01 phamj88

Please make sure your have the per-defined groups in your database. The groups in USER_GROUPS must be created manually.

And the warning when redirecting to your local http server is expected, that's the security feature of browser, not saml2 auth related.

Keep me updated if you have further issue.

fangli avatar Jan 24 '19 11:01 fangli