derricksmith / phpsaml

GLPI Plugin - SAML integration using the Onelogin SAML Library
MIT License
32 stars 24 forks source link

Issue on multi-tenant Azure login #72

Closed nykroy closed 2 years ago

nykroy commented 2 years ago

hi I have a problem that i dont know if is a bug

If i login with a user of my organization it is works perfectly but if i login with other tenant than have permisións to login this is the error that i see

image

image

sorry for my english

derricksmith commented 2 years ago

I think I understand. Need to see the contents of the SAML responses. Can you expand the orange SAML GET and POST requests in your screenshot and post back here? Be sure to obfuscate confidential info.

nykroy commented 2 years ago

GET: image image

POST: image image

nykroy commented 2 years ago

there are any option to add more entries on db with other saml applicacions form azure?. I see the plugin take de ID 1 on the config.class.php por conection with the db and take de dates for make de sso and maybe i can add another line for another tenant. image

nykroy commented 2 years ago

I select an Name Id Format but when i save allwais is select unespecified image

I see on db that this is not a field of database image

It is possible that these is the reason for my problem?

I see that the doc say that image

derricksmith commented 2 years ago

I started working on version 1.2.0. The issue where name_id_format column is missing will be fixed.

nykroy commented 2 years ago

i Know, on the issue https://github.com/derricksmith/phpsaml/issues/74 but on my case i have created this field on de database. Now y can select de email address like NameId but the issue persist

derricksmith commented 2 years ago

Just want to make sure I understand. After you created the field, you are still unable to save the value when changing the field on the form?

nykroy commented 2 years ago

No, After i created the field i receive the same response on login with external Azure AD image Both Azure AD, mine and my client have the respective App for comunication between them. I have the enterprise app on my Azure AD and another app link with the enterprise App for link with my client Azure AD.