Hello, I would like to authenticate the users of my installation of Discourse with our University SAML. I’m using the docker version of Discourse with the SAML plugin. I’ve tried to follow the instructions on the GitHub site of this plugin. Everything works fine until I see the following form: […

Hello Ronald :slight_smile: :wave: really glad to see more and more Universities joining the Discourse family :smiley: You have quite an interesting issue! My SAML/SSO fu isn’t strong so I am not sure what is happening here, but can you try enabling the verbose sso logging site setting? It would he…

My guess (and my experience with saml is limited, I think I’ve only once helped someone configure it) is that the issue is on the saml side. It’s either configured to send the hash or you’re somehow using the wrong field.

Thank you very much for your speedy reply! After setting the sso logging to verbose, his is what I found in the production.log: Started GET "/session/csrf" for <IP> at 2020-07-24 14:32:51 +0000 Processing by SessionController#csrf as JSON Completed 200 OK in 1ms (Views: 0.1ms | ActiveRecord: 0.0ms…

Thanks for the quick reply! That might also be the case! I will contact the SAML issuer and inform about the hashing…

Yup! You can clearly see that SAML is sending a hash of the email and the username. I think that there is some configuration where you map the SAML fields to the Discourse ones, so it’s conceivable that there is something you can change on the Discourse side to fix it.

After more research I found that the ‘hashed’ code in the registration form is actually the NameID send by the IdP. In the configuration of SAML on the IdP I’ve also enabled the following attributes: Display Name: urn:mace:dir:attribute-def:displayName Full Name: urn:mace:dir:attribute-def:cn Emai…

Hello @ronligt , any success in mapping the right attributes via discourse-saml configs? I’ve been trying using this config in the plug-in but no lucky so far: [Screenshot 2023-05-03 at 08.27.45] Have a good one! :slight_smile:

المصادقة باستخدام SAML تعطي اسم مستخدم وبريد إلكتروني مشفرين

دعم المنتج تسجيل الدخول الموحد

ronligt (Ronald Ligteringen) 24 يوليو 2020، 2:39م 5

شكرًا لك على الرد السريع!

قد يكون هذا هو الحال أيضًا! سأتواصل مع مُصدر SAML وأبلغه بخصوص التجزئة…

الموضوع		الردود	مرات العرض
Adopting SAML with an existing user base SSO	5	2031	5 أغسطس 2020
Discourse-saml + Okta endless redirect SSO	7	4787	20 يوليو 2017
Configure OneLogin's SAML for Discourse Integrations sso , how-to	0	7881	18 أغسطس 2017
Discourse-saml as sole login method Self-hosting	5	1608	27 يوليو 2017
SimpleSAML login SSO	7	1012	23 أبريل 2023

المصادقة باستخدام SAML تعطي اسم مستخدم وبريد إلكتروني مشفرين

الموضوعات ذات الصلة