mod_auth_mellon and eduGAIN

Uninett / mod_auth_mellon

An Apache module with a simple SAML 2.0 service provider

207 stars 182 forks source link

mod_auth_mellon and eduGAIN #162

Closed TanguiC closed 5 years ago

TanguiC commented 6 years ago

We tried to have an SP using mod_auth_mellon in eduGAIN (eduvpn, see https://github.com/eduvpn/documentation/blob/master/SAML.md). We had to roll back for now. The XML parsing is too slow for such a high number of IdPs (it took 70 secs or more), which resulted in browsers timing out. Can anything be done about this?

ghost commented 6 years ago

It would be great if the XML parsing speed could be improved! For eduVPN specifically I use my own WAYF where I whitelist IdPs, not all IdPs will get access by default. For the whitelisted IdPs I generate a (minimal) XML file with only the for mod_auth_mellon relevant information in there. I guess it doesn't scale if you really want to give (immediate) access to all IdPs, but it worked for us as an ugly workaround...

Disco Service: https://github.com/fkooman/php-saml-ds

olavmrk commented 5 years ago

Closing this issue as part of archiving this project. See the announcement for details:

https://github.com/Uninett/mod_auth_mellon/blob/info/README.md