General setup and configuration with TFIM as IDP

[leinad1]

Hi, I have some general questions:

• Should/Can I configure LDAP in parallel with SAML? (it would be the same LDAP, that my IDP uses)
• Are users get created automatically in Redmine also from LDAP, when authenticating via SAML?
• Is it SP initiated or IDP initiated SAML flow?

However, I am currently not able to login via SAML. I have tried to create the user internally and also via LDAP login before trying SAML login. I always get: I, [2017-09-13T12:27:45.630647 #4371] INFO -- : Started POST "/redmine/auth/saml/callback" for 192.168.1.139 at 2017-09-13 12:27:45 +0200 I, [2017-09-13T12:27:45.721512 #4371] INFO -- : Processing by AccountController#login_with_saml_callback as HTML I, [2017-09-13T12:27:45.721722 #4371] INFO -- : Parameters: {"RelayState"=>"", "SAMLResponse"=>"PHNhbWxwOlJlc3BvbnNlIHhtbG5zOnNhbWw9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDph\r .... \r\nc3BvbnNlPg==", "provider"=>"saml"} I, [2017-09-13T12:27:45.755122 #4371] INFO -- : Current user: anonymous W, [2017-09-13T12:27:45.759974 #4371] WARN -- : Failed login for 'approver' from 192.168.1.139 at 2017-09-13 10:27:45 UTC I, [2017-09-13T12:27:45.761588 #4371] INFO -- : Redirected to http://redmine.myhost.local/redmine/login

Has authentication succeeded, when I see this message and only user lookup failed? Or do I still have a problem with authentication?

How do I configure debug/trace to nail this?

[leinad1]

Got it now! My SAML assertion did not contain the user information as attribute.