Categories
IdP Linux SAML Shibboleth Simplesamlphp SingleSignOn SSO

Debugging Shibboleth attribute mapping

I recently tried to clone an existing SSO-protected application to use a new IdP. The older instance was protected using SAML (keycloak based) and worked fine. Now the IdP changed to (a much larger) SimpleSAMLphp and while the login itself worked the application refused to work. Suspected culprit: attributes (missing, unmapped or mapped the wrong […]

Categories
IdP Kerberos Keycloak Linux Shibboleth Simplesamlphp SingleSignOn SSO

Single Sign On (SSO) with Keycloak

I’ve been running SAML based SSO using Simplesamlphp for some time now. While its PHP based approach is very flexible (and configuration is easy compared to Java-based Shibboleth) there are still quite some things you need to know to get started. Keycloak is an alternative that’s not as flexible to use (as far as I’ve […]