Project

General

Profile

Feature #16916

enhance external authentication capabilities with SAML

Added by Stephen Benjamin almost 5 years ago. Updated about 3 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
Authentication
Target version:
-
Difficulty:
Triaged:
Bugzilla link:
Pull request:
Fixed in Releases:
Found in Releases:

Description

Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1199091
Description of problem:

While Satellite 6 has support for consuming external authentication as provided by Apache is there, the only way of using that feature is in connection with sssd on IPA-enrolled machine. However, other external authentication mechanisms are possible besides those tied to sssd.

Namely, SAML is possible and should be easily configurable on Satellite 6. The proposal is to use mod_auth_mellon and (optionally) integrate with Ipsilon Identity Provider via some simple katello-installer parameters.

Version-Release number of selected component (if applicable):

Satellite 6.0.x.

How reproducible:

Deterministic.

Steps to Reproduce:
1. Attempt to configure Satellite 6 to consume external authentication/users via SAML, with Ipsilon or other IdP.

Actual results:

No katello-installer options.

Expected results:

There are katello-installer options to achieve that setup.

Additional info:

History

#1 Updated by Dominic Cleal almost 5 years ago

  • Subject changed from enhance external authentication capabilities with SAML to enhance external authentication capabilities with SAML
  • Category set to Authentication

Also available in: Atom PDF