OpenConext / Mujina

A mock IDP and SP using the OpenSAML library
Apache License 2.0
360 stars 167 forks source link

I wanted to implement SSO using Mujina IDP. #84

Open jegancts opened 2 years ago

jegancts commented 2 years ago

My application is Angular Front end currently running with basic authorisation using user id and pasword login screen. I wanted to remove this basic login screen functionality and need to add Mujina IDP as login form and authorise.

Do we have any angular front end repo which uses Mujina IDP ?

Also my backend service uses spring boot. where in need to implement the SSO in my back end spring boot as well.

Do we have any spring boot repo which uses mujina IDP ?

Your help would be much appreciated. I spent long hours surfing about Mujina but not seeing much help. It would be great if someone implemented Mujina .....

thijskh commented 2 years ago

Hi. Mujina is a mock IdP, i.e. not a real IdP product but meant for testing.

Also, if you have an application that you want to replace the login screen of, I think you are looking for an SP solution rather than an IdP.

Maybe something like Shibboleth-SP is what you need.

jegancts commented 2 years ago

Thanks thijskh for the quick response ....Yes I need mock IDP with SSO using mujina for testing purpose. Not in real IDP because i am going to use Azure AD for real IDP. My application is angluar (Front end), Spring boot (backend).

Do i can get any repo (SP) which interacts with Mujina IDP for SSO ? similar like mujina SP .. this would great help for me.

thijskh commented 2 years ago

If you want to use a real IdP later you need some kind of real SP implementation in your application. Not a mock SP. So I'd advise to look into Shibboleth-SP.

jegancts commented 2 years ago

Thanks thijskh... however i am more interested Mujina mock IDP to be implemented in my repository. Is that any repo available who implemented mujina IDP would be more helpful and much appreciated !

jegancts commented 2 years ago

do we have any documentation to configure external SP to Mujina IDP ? https://stackoverflow.com/questions/40581068/how-to-add-an-external-sp-service-provider-in-mujina-idp-identity-provider

jegancts commented 2 years ago

HI Any help would be much appreciated ...

thijskh commented 2 years ago

There's no need to configure SP metadata in Mujina IdP, because it's a mock IdP, it will accept authentication requests from any SP that sends one to it. I have answered that on the Stackoverflow question you linked to.

Githubbili commented 1 year ago

@jegancts HI,jegancts.Have you achieved SSO login? I met some questions during the implementation, and I want to ask you for advice. my sso config `

OH/ZL7JKfSEgp8nCX7urthWVvHY9cybEXls08INEWJk= uV6ZTQCcHE+CE2ZHEjH5QQ7eyVLSDgoluWnEIyNnL4Rit9AZip9k2ZAAJfkvAaACSwAOVQJN4Aiy8RB8F9rGGKAXTKC4Lc8Aa2eJs1EZgWWPVl3wSO17Ba3VYN4gT9L4Dk1fA/Pf4YRHlfzSE2lVU2RXAtE8PkcKqiUfcx8pC/BOJSorBMpoy+RL6mKA7NxjBjBvGSb39J7T1H0lJEyyQVDJgCYPS1J+9lp92WRohIE1C3ftH/SN7drNxdlI+5w5o43sm/hGJFMFApcEJzwk+HQbdq79z/Vh4ml5t1qBrDKKNsbYcZ6uZ7Jzl9BIKGrYf94GfWGdhJjmQQaG2LKB3g== xxx urn:oasis:names:tc:SAML:2.0:nameid-format:persistent ` but i have a question,can you help me? ![Snipaste_2022-11-15_20-22-10](https://user-images.githubusercontent.com/21958998/201918799-5f4a4c22-d765-45cc-bbdc-2d7c486d3a7b.png)
thijskh commented 1 year ago

The exception says you do not have a SAML message (SAMLRequest) when calling the IdP. So probably your SP does not send a correct SAML message. This is not really a bug in Mujina but a generic SAML configuration question.