argoproj / argo-cd

Declarative Continuous Deployment for Kubernetes
https://argo-cd.readthedocs.io
Apache License 2.0
17.32k stars 5.26k forks source link

OneLogin SAML setup #5450

Open shubham25namdeo opened 3 years ago

shubham25namdeo commented 3 years ago

Summary

Hello, I am using Argo CD for EKS deployments. For better usability and User management OneLogin needs to be integrated with it, but due to company norms, I can't use OIDC method, and SAML is not provided for OneLogin on Documentation pae.

So, I've tried using steps from Argo's OKTA SAML page to map OneLogin in a same manner but it didn't work out. Due to this issue we need to hold off Argo CD usage for now. OneLogin part is fine as there are other apps also working on SAML.

It would be great if someone can help me out with this issue. The argo-cm config used for Configurations is below:

apiVersion: v1
data:
  accounts.testUser: apiKey,login
  accounts.testUser.enabled: "true"
  dex.config: |
    logger:
      level: debug
      format: json
    connectors:
    - type: saml
      id: saml
      name: saml
      config:
        ssoURL: https://<SSO URL from OneLogin>
        caData: | <Base64 encoded key>
        redirectURI: https://<ArgoServer URL>/api/dex/callback
        usernameAttr: email
        emailAttr: email
        groupsAttr: group

By this we are able to get OneLogin option on ArgoCD UI, but that doesn't work and redirects to the same page on button click.

Motivation

Companies like mine, who uses SAML on OneLogin might get benefit from this, and may look forward to ArgoCD.

Proposal

Similar to OKTA this can be added.

roberto-caylent commented 1 year ago

I'm facing the same issue. but with AWS Identity Center, cant figure out how to get it to work.

nicl-dev commented 1 year ago

Has anyone ever managed to make this work?