gravitational / teleport

The easiest, and most secure way to access and protect all of your infrastructure.
https://goteleport.com
GNU Affero General Public License v3.0
17.08k stars 1.72k forks source link

Alternative service to `samltest.id` for SAML IdP guide #38821

Closed flyinghermit closed 1 month ago

flyinghermit commented 4 months ago

Applies To

Teleport as a SAML identity provider guide

Details

The guide uses samltest.id , a free reference SAML IdP and SP testing service as a reference service provider to test integration. Unfortunately, the service is broken now. It may come up online again but it leaves bad experience for our docs user when following the guide.

How will we know this is resolved?

The guide should show example based on an always reproducible SAML service provider service, maybe with an application runnable in a docker container.

Related Issues

n.a

mmcallister commented 2 months ago

Status:

I've tested this one out from Auth0, it's free and they are a trusted org. However it is a bit involved to set up on their end. https://auth0.com/docs/authenticate/protocols/saml/saml-configuration/configure-auth0-as-service-and-identity-provider

Auth0-SAML-test

Once in place you can simply add the details , similar to the defunct samltest.id service.

metadata:
  # The friendly name of the service provider. This is used to manage the
  # service provider as well as in identity provider initiated SSO.
  name: auth0-samltest
spec:
  # entity_id is the metadata endpoint of service provider
  # that serves entity descriptor, aka SP metadata.
  entity_id: urn:auth0:dev-e8erwfts8t85u6x0:MARIE-SAML-Auth0-IDP
  # acs_url is the endpoint where users will be redirected after
  # SAML authentication.
  acs_url: https://test-marie.us.auth0.com/samlp/3op6w0gzXDxYGtU9oKBhMFjjx0QB8KRi
version: v1

Metadata:

https://dev-e8erwfts8t85u6x0.us.auth0.com/samlp/metadata?connection=MARIE-SAML-Auth0-IDP

Metadata


I'm trying out a couple of Docker solutions as well

mmcallister commented 2 months ago

Docker demo from Disney dev: https://medium.com/disney-streaming/setup-a-single-sign-on-saml-test-environment-with-docker-and-nodejs-c53fc1a984c9

mmcallister commented 1 month ago

thanks @flyinghermit!

mmcallister commented 1 month ago

Screenshot 2024-06-03 at 16-46-48 Protected Page SAML Demo Service Provider

tested the new process out successfully - closing this as a duplicate