search

spring-attic / spring-security-saml-dsl

Spring security okta dsl.
MIT License
43 stars 61 forks source link

Provide an example of the library usage with google #4

Open jeanbza opened 8 years ago

jeanbza commented 8 years ago

See: https://developers.google.com/google-apps/sso/saml_reference_implementation

markdouglasswork commented 8 years ago

It looks to me like those docs are to use Google as a Service Provider when working with another Identity Provider.

rwinch commented 8 years ago

@markthemarkest You are right. I think a better link might be https://support.google.com/a/answer/6087519?hl=en

markdouglasswork commented 8 years ago

Ah that makes more sense, thanks. However, I don't believe that I have access to any admin console where I could set something like that up. Google doesn't seem to provide free developer instances to test integrations, unless I've missed something.

rwinch commented 8 years ago

@markthemarkest I'm not sure that they do. Perhaps @ttomsu knows if Google provides a free SAML based IdP?

ttomsu commented 8 years ago

Not that I know of - it appears Google Apps for Work has some SAML support, but I haven't tried it yet.

Alas, I think you must be a paying customer for GApps.

rwinch commented 8 years ago

@ttomsu Thanks for the response. Do you need SAML integration with Google as well or do you just need SAML integration with Okta?

ttomsu commented 8 years ago

I only used Okta because there was a free developer preview. In theory, since it's based on the standard, any SAML IdP should work. I'll try to get the Google SAML one working as a proof-of-concept.

ttomsu commented 8 years ago

Looks like one can setup SAML support through the Admin console --> Security --> Set up single sign-on (SSO).

googlesaml2

swarm1 commented 7 years ago

Does anybody has any example how to use it with google ? I followed example for Okta but I am getting:

Error: app_not_configured_for_user Service is not configured for this user.

ttomsu commented 7 years ago

It sounds like you need to enable it for all or a subset of your users.

  1. From the Admin Console, click Apps --> SAML Apps --> your_app_name
  2. In the block with your app name, you should see three vertical dots with 3 options:
    1. ON for everyone
    2. OFF
    3. ON for some organizations

Click one of the ON options to enable.