swisscom / simplesamlserviceprovider
Neos Flow package containing a SAML service provider based on SimpleSAMLphp.
Installs: 3 922
Dependents: 0
Suggesters: 0
Security: 0
Stars: 3
Watchers: 6
Forks: 4
Open Issues: 0
Type:neos-package
Requires
- neos/flow: ^6.0 || ^7.0
- simplesamlphp/simplesamlphp: ~1.17
This package is auto-updated.
Last update: 2024-11-30 09:08:24 UTC
README
Neos Flow SAML authentication package containing a SAML service provider based on SimpleSAMLphp.
Installation
First, install this package via composer. It will add simplesamlphp/simplesamlphp as dependency.
Several configuration steps have to be done:
- Create symlink
Web/simplesamlphp -> ../Packages/Libraries/simplesamlphp/simplesamlphp/www
- Patch the Apache .htaccess configuration to not rewrite simplesamlphp and set the
SIMPLESAMLPHP_CONFIG_DIR
environment var. - Copy the example config structure to the
SIMPLESAMLPHP_CONFIG_DIR
underConfiguration/SimpleSamlPhp/
This steps can be performed via composer post update and install scripts. They are not included by default inside this package anymore, as it highly depends on the setup whether it is requested to execute it or not. To enable it, add the following block to your composer.json
"extra": {
"neos/flow": {
"post-install": "Swisscom\\SimpleSamlServiceProvider\\Composer\\InstallerScripts::postUpdateAndInstall",
"post-update": "Swisscom\\SimpleSamlServiceProvider\\Composer\\InstallerScripts::postUpdateAndInstall"
}
}
Sample setup
As a sample and for test purposes, the serverless SAML identity provider Samling can be configured most basically as follows:
mkdir Configuration/SimpleSamlPhp/metadata
cp Packages/Libraries/simplesamlphp/simplesamlphp/metadata-templates/saml20-idp-remote.php Configuration/SimpleSamlPhp/metadata/
Add the following metadata config to Configuration/SimpleSamlPhp/metadata/saml20-idp-remote.php
:
$metadata['https://fujifish.github.io/samling/samling.html'] = array(
/* Configuration options for the first IdP. */
'SingleSignOnService' => 'https://fujifish.github.io/samling/samling.html',
'certificate' => 'samling.pub'
);
The certificate is copied from https://fujifish.github.io/samling/samling.html
to the cert folder (see certdir
in config.php).
Integration
Have a look into the package's Configuration/Settings.yaml
and configure the entry points if needed.
The following setting has to match the authentication source configured in the SimpleSAMLphp authsources.php
config file:
Swisscom:
SimpleSamlServiceProvider:
authSource: 'default-sp'