Is there a way to provide SAML sp implementation using an Apache filter? - apache2

I'm really new with SAML SSO. I'm woking with an idp webapp that will support SAML authentication.
The problem is that I will need that other sp authenticate with my idp and I don't want to implement all the protocol in every platform (Python, PHP, Java, etc).
I was thinking if there's a way to implement the sp authentication flow using an apache filter.
Has someone thought about this?
Thanks.

mod_mellon is what you're looking for: https://github.com/UNINETT/mod_auth_mellon

Using Shibboleth as a SAML client in conjunction with Apache web server may be an alternative.

Related

Can anyone provide step by step process to implement SAML

I have a situation where I currently call web focus reports from our JAVA web applications. But is not a secured way calling and I wanted to implement SAML authentication and pass parameters through SAML. Any help in this regard will be great help
Is there a reason you need SAML?
OpenID Connect is a much easier option.
For SAML, you need to implement a SAML stack.
There is more information here.

Does LDAP support SAML 2.0 requests?

I am working on a project where we are planning to use SAML 2.0 to send authentication requests to OpenLDAP. Can someone please tell me if its supported or not? I am not able to get the clear answer via Google.
SAML and LDAP are completely different things. SAML is mostly used for Web-based SSO. The identity provider (IdP) part of the access manager software/system you're using (i.e., the one that implements SAML authentication authority) may use a back-end LDAP server (e.g., OpenLDAP) for authenticating users.

How do I implement SAML in my application

I am using a SaaS application and I want to use our own LDAP to Login to that 3rd party application. I want to provide a link to that application in my Portal. Both the applications are hosted in Cloud and are Spring based.
Please let me know where to Start and how to go about implementing SP initiated SAML.
Thanks!
First of all you need a SAML IDP that authenticates against LDAP e.g. shibboleth.
Then you need a client side SAML stack.
Refer: SAML : SAML connectivity / toolkit.
You could also look at IDaaS e.g. Auth0 or Okta.

WSO2 SSO with SAML 2 - Front End React.js (REDUX), SPRINGBOOT backend

I need to integrate a client application written with react and redux (spring boot backend) with WSO2 Single Sign-On (SAML 2.0) IDP
Do I need to make use of few node.js based packages such as "passport-saml" etc to achieve single sign-on with wso2 IDP?
Appreciate if you could share your thoughts/expertise/any reference links.
Thanks.
You can use OpenSAML(no longer maintained though) or a similar Java SAML assertion library for this.
Passport-js is specifically designed to work with nodejs. One way u could make use of passportJs is by implementing the authentication and authorization business logic of the application as a NodeJs based micro-service. AFAIK WSO2 IS works perfectly with passport-js.

SAML request for SSO from Service provider to ADFS in asp.net C#

Could you please share how to Manage SAML post request from asp.Net Client application to ADFS server? Is there need any other configuration in client side?
In our case the ADFS server already configured, we need to implement that SSO in our asp.net application using SAML request. Could you please share your knowledge?
There is no built in support in the .NET framework for the SAML2 protocol. And don't write your own (I've done that, it's a LOT of work to do it right and secure). Find an open source or commercial SP (Service Provider) implementation for .NET and use that. There are plenty of them (disclaimer: I'm the author of one of the SP implementations, but to avoid a race from everyone with an SP implementation to post and recommend their one, I won't recommend any here).

Resources