SAML

Contents

• Introduction
• Plugin configuration
• User guide

Introduction

The SAML login plugin follows the SAML standard, a Single Sign On authentication open-standard.

The underlying communication is implemented using passport-saml module.

Plugin configuration

For a correct plugin operation some parameters must be defined as static environment variables if the plugin is activated.

• SAML_PATH, default value api/login/saml/callback defined the return callback URL after the login has been successfully done on the Identity Provider side.
• SAML_ENTRY_POINT, the Identity Provider's entry point to start the SAML process.
• SAML_ISSUER, the SAML issuer defined within the Identity Provider configuration for the correct flow.

User Guide

This plugin is very easy to use. Once it has been activated a new button will be available in the /login user interface of the frontend module.

Figure 1.: RAGE Analytics Frontend interface with sign-in with SAML option available.

By clicking on Sign In with SAML the user will be taken to the Identity Provider's login user interface. When the login has been successfully completed the user will be redirected to the RAGE Analytics front-end's home page.

Complete implementation of the SAML plugin can be found here.