Skip to content

oidc-to-saml2.md

Latest commit

 

History

History
59 lines (49 loc) · 2.52 KB

oidc-to-saml2.md

File metadata and controls

59 lines (49 loc) · 2.52 KB

Proxy: OpenID Connect <-> SAML2

After following the installation instructions, the proxy must be configured with a OpenID Connect frontend and a SAML2 backend.

Configuration

  1. Copy the necessary base configurations from the <satosa_path>/example directory:

    mkdir -p oidc-saml2/plugins
cp example/{proxy_conf.yaml.example,internal_attributes.yaml.example} oidc-saml2/
cp example/plugins/frontends/openid_connect_frontend.yaml.example oidc-saml2/plugins/
cp example/plugins/backends/saml2_backend.yaml.example oidc-saml2/plugins/

  2. Configure the proxy:

  3. Rename proxy_conf.yaml.example to proxy_conf.yaml:

    mv proxy_conf.yaml.example proxy_conf.yaml

  4. Edit the necessary proxy configuration parameters, see the SATOSA proxy configuration section of the proxy configuration instructions for more information. To specify the necessary plugins make sure to include the following configuration parameter values:

    BACKEND_MODULES:
  - "oidc-saml2/plugins/saml2_backend.yaml"
FRONTEND_MODULES:
  - "oidc-saml2/plugins/openid_connect_frontend.yaml"

  5. Configure the attribute mapping:

  6. Rename internal_attributes.yaml.example to internal_attributes.yaml:

    mv internal_attributes.yaml.example internal_attributes.yaml

  7. Map the necessary attributes, see the Attribute mapping configuration section of the proxy configuration instructions for more information.

  8. Configure the plugins

  9. Rename plugins/openid_connect_frontend.yaml.example to plugins/openid_connect_frontend.yaml and plugins/saml2_backend.yaml.example to plugins/saml2_backend.yaml

    mv plugins/openid_connect_frontend.yaml.example plugins/openid_connect_frontend.yaml
mv plugins/saml2_backend.yaml.example plugins/saml2_backend.yaml

  10. Specify the necessary configuration parameters, see the Plugins section of the proxy configuration instructions for more information.

  11. Generate the SAML metadata, see the SAML metadata section of the proxy configuration instructions for more information. Note: SAML metadata can only be generated for the backend, so make sure to specify the option -b.

  12. Start the proxy application, see the Running the proxy application section of the proxy configuration instructions for more information.