Project

General

Profile

Actions

Feature #16916

open

enhance external authentication capabilities with SAML

Added by Stephen Benjamin over 7 years ago. Updated 6 months ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
Authentication
Target version:
-
Difficulty:
Triaged:
Fixed in Releases:
Found in Releases:

Description

Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1199091
Description of problem:

While Satellite 6 has support for consuming external authentication as provided by Apache is there, the only way of using that feature is in connection with sssd on IPA-enrolled machine. However, other external authentication mechanisms are possible besides those tied to sssd.

Namely, SAML is possible and should be easily configurable on Satellite 6. The proposal is to use mod_auth_mellon and (optionally) integrate with Ipsilon Identity Provider via some simple katello-installer parameters.

Version-Release number of selected component (if applicable):

Satellite 6.0.x.

How reproducible:

Deterministic.

Steps to Reproduce:
1. Attempt to configure Satellite 6 to consume external authentication/users via SAML, with Ipsilon or other IdP.

Actual results:

No katello-installer options.

Expected results:

There are katello-installer options to achieve that setup.

Additional info:

Actions #1

Updated by Dominic Cleal over 7 years ago

  • Subject changed from enhance external authentication capabilities with SAML to enhance external authentication capabilities with SAML
  • Category set to Authentication
Actions

Also available in: Atom PDF