search

cloudfoundry / uaa

CloudFoundry User Account and Authentication (UAA) Server
Apache License 2.0
1.58k stars 827 forks source link

Integrating UAA with a SAML app (UAA as SAML IDP and app as SAML SP) #283

Closed slee-okta closed 8 years ago

slee-okta commented 8 years ago

I see that OAuth is the main vehicle for SSO into apps. Was curious if there is a way to do it with SAML via what's here - or some workaround.

cf-gitbot commented 8 years ago

We have created an issue in Pivotal Tracker to manage this. You can view the current status of your issue at: https://www.pivotaltracker.com/story/show/110870088.

sreetummidi commented 8 years ago

@slee-okta UAA supports connecting SAML 2.0 based Identity Providers for the purposes of SSO. In this situation the integration layer between UAA and the SAML IDP is SAML 2.0 and between the UAA and the APP is OAuth because the SAML Assertion is converted into an OAuth token for use by the APP.

We don't have plans to expose UAA as a SAML IDP at this point.

pranjaljain commented 7 years ago

@sreetummidi This feature of UAA as SAML IDP is available now in UAA? Right? After (https://github.com/cloudfoundry/uaa/pull/303)

yhjhoo commented 7 years ago

in this API document http://docs.cloudfoundry.org/api/uaa/

It says UAA support SAML protocol, any examples?