XCP-ng
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    XOA and SAML (keycloak)

    Scheduled Pinned Locked Moved Xen Orchestra
    5 Posts 3 Posters 1.5k Views 1 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Z Offline
      zerealfox
      last edited by

      Hello,
      I'm facing an issue making XO working with SAML service provider plugin, connected to Keycloak Identity Provider.
      Does anybody have an experience on this and the associated configurations?
      Do you have any experience with another 2FA(MFA) identity provider?
      Thanks in advance,
      Pascal

      1 Reply Last reply Reply Quote 0
      • olivierlambertO Offline
        olivierlambert Vates 🪐 Co-Founder CEO
        last edited by

        Sadly I have no experience with this kind of setup. What's your issue exactly?

        1 Reply Last reply Reply Quote 0
        • Z Offline
          zerealfox
          last edited by

          Hello Olivier,
          In fact I can't get SAML working with any SAML IdP.
          I want to add 2FA to my XOA, without adding a reverse proxy in front of it and without delegating the authentication to a third party.
          The only plugin to achieve it seems to be the SAML one.
          Does anybody have any experience with any SAML IdP? I can change and use privacyID3A, openOTP, linOTP, or ...
          But the information in the plugin configuration are scarce.
          And I can't get a log of the requests.
          All I got is an "an error has occurred" in plugin configuration page.
          Thanks for your help
          Pascal

          1 Reply Last reply Reply Quote 0
          • olivierlambertO Offline
            olivierlambert Vates 🪐 Co-Founder CEO
            last edited by

            Ping @pdonias or @julien-f that might maybe know a bit more than me regarding this, but I'm not sure.

            1 Reply Last reply Reply Quote 0
            • julien-fJ Offline
              julien-f Vates 🪐 Co-Founder XO Team
              last edited by

              I'm not overly familiar with SAML, but our plugin is based on this: https://github.com/bergie/passport-saml

              Let us know if you find something relevant.

              1 Reply Last reply Reply Quote 0

              Hello! It looks like you're interested in this conversation, but you don't have an account yet.

              Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

              With your input, this post could be even better 💗

              Register Login
              • First post
                Last post