greenpau / caddy-security

๐Ÿ” Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. ๐Ÿ’Ž Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. ๐Ÿ’Ž Authorization with JWT/PASETO tokens. ๐Ÿ”
https://authcrunch.com/
Apache License 2.0
1.39k stars 70 forks source link

question: SAML authentication using samltest.id IdP #235

Open stlrnz opened 1 year ago

stlrnz commented 1 year ago

I've tried to figure out if this plugin is able to authenticate users using the IdP provided by samltest.id?

On the SAML section of the documentation you state:

The plugin supports the following SAML identity providers (IdP): Azure Active Directory (Office 365) Applications

However, there is a Jumpcloud integration descriped, too. So maybe this plugin also supports generic providers?

I've tried to create a configuration for samltest.id following the Jumpcloud configuration. However, there is a need to upload a metadata XML file to samltest.id. Is this plugin able to generate such a file?

Right now, I'm stuck with the following (non-working) configuration.

{
    order authenticate before respond

    security {
        saml identity provider generic {
            realm app
            driver generic
            idp_metadata_location /etc/caddy/samltest.xml
            idp_sign_cert_location /etc/caddy/samltest.pem
            idp_login_url https://samltest.id/idp/profile/SAML2/Redirect/SSO
            entity_id urn:oasis:names:tc:SAML:attribute:subject-id
            acs_url http://localhost:8082
        }

        authentication portal myapp {
            enable identity provider generic
        }
    }
}

:8082 {
    log

    handle /ping {
        respond "pong"
    }

    handle {
        authenticate with myapp
        root * /var/www/html/public
        file_server
    }
}

Maybe you could provide a step-by-step guide for configuring generic providers?

Thank you.

greenpau commented 1 year ago

@stlrnz , please search this repo for the issues related to Azure: https://github.com/greenpau/caddy-security/issues?q=is%3Aissue+azure

Try asking people for help. For example, @calebcoverdale.

stlrnz commented 1 year ago

@greenpau Maybe there is a misunderstanding. I'm not looking for help related to Azure. I'm trying to use the plugin in combination with a generic IdP (for examle, samltest.id). Is this even possible?