search

DependencyTrack / dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
https://dependencytrack.org/
Apache License 2.0
2.73k stars 580 forks source link

Add SAML integration #876

Open nille opened 3 years ago

nille commented 3 years ago

The enhancement may already be reported! Please search for the enhancement before creating one.

Current Behavior:

Currently only Single Sign-On via LDAP is supported, with support for OIDC coming i v. 4.

Proposed Behavior:

Add support for Single Sign-On via SAML. I am no java developer myself but this looks interesting to me: http://www.pac4j.org/ Perhaps something that could be used?

Legeril commented 1 year ago

Is SAML on the roadmap yet? @stevespringett

peterloron commented 1 year ago

SAML support is a key feature for many enterprises.

nscuro commented 1 year ago

@peterloron Enterprises are more than welcome to contribute features they want :p

In all seriousness, with both LDAP and OIDC available there is currently no plan to implement SAML support from the core project team. But contributions are welcome, thus the "help wanted" label.

krystan commented 1 month ago

You realise this is an incredibly shortsighted approach, I appreciate this project has limited resources but a lot of large organisations have standardised on SAML for SSO and require this, it would be good to at least have it on the RM, especially with SBOM and analysis tools such as this now gaining traction in the security community.