Snorby / snorby

Ruby On Rails Application For Network Security Monitoring
Other
1k stars 226 forks source link

Use environment for authentication #404

Open elliotkendall opened 8 years ago

elliotkendall commented 8 years ago

I would like to integrate Snorby with Shibboleth, my organization's SAML-based web single sign on system. It works by loading an Apache module and then setting variables in Apache's environment with the data from the session. So effectively, REMOTE_USER is going to hold the username of the logged in user, and I would like Snorby to skip asking for a password in that case and just sign the user in.

I had hoped that the presence of config.params_authenticatable = true in devise.rb meant this might just work, but it doesn't seem to. I had also hoped that the CAS authentication method would work for this, too, but it seems to have CAS-specific stuff in it. I don't mind writing up a pull request if someone could point me in the right direction. Do I need to write a new authentication handler ala snorby_cas_authenticatable?