SAML support

dudheit

I like Flarum's social login support for GitHub, Twitter and Facebook. But I was wondering whether there will be a more general support for single sign on systems like SAML or Shibboleth as well?

luceos

dudheit absolutely possible .. as an extension.

dudheit

luceos Cool! But for now auth-twitter, auth-github etc. are all independent, right? So I thought about buildung a OAuth/SAML base extension all the various providers can be derived. What is your opinion of that?

jordanjay29

My University used Shibboleth, I'd love to see stuff like this happen for more interoperability.

luceos

dudheit there is no need for a base package because they are widely available. I wouldn't be surprised if the flarum oauth packages depend on one such package.

dudheit

luceos True, but I think about the flarum UI rather than the technical details of OAth and SAML.
Correct me if I am wrong but when I start to develop an SAML extension now I have to repeat the exact same code of twitter-auth (like hooking in the login dialog etc.) dispite the fact that my button will label SAML instead.

So my idea was to provide a Single Sign On meta extension which provides standard buttons, forms to activate and configure different OAuth providers options etc. To bring SAML support to that kind of extensions would mean to only implement the technical details of SAML backend but not reinventing the wheel in terms of UI.

luceos

dudheit that's a different story. Sounds like a good idea.

askvortsov

If you're still looking, please take a look at https://discuss.flarum.org/d/22757-flarum-saml