SAML with Shibboleth support about bell

[robertd]

+1

[geek]

@Nogbit I would like to see SAML support as well. If someone is willing to contribute it then that would be the fastest way to get it into bell.

[Nogbit]

We decided to stick with Express for the time being, if one of us gets the bandwidth we could contribute and we did discuss that.

[molekilla]

thinking if you take passport-saml and create the wrapper for hapi-bell it might work. Ideally, with maintaining passport-saml saml.js as a library, not forking. Anyone interested ?

More
https://github.com/bergie/passport-saml/blob/master/lib/passport-saml/strategy.js#L3

[timcosta]

+1 also interested in this

[jshum]

+1 non-SAML support is making us stick with Express for now, but would love to help and contribute.

[PaulMougel]

I'd love to be able to use SAML with bell. Any thought on where to start?

[ldesplat]

You would have to implement it. So you would add a new protocol to bell called SAML.

A protocol is really this:

var SAML = function (settings) {

    return function (request, reply) {
        // Implement the whole SAML flow
    }
}

You can find the complicated specs here https://wiki.oasis-open.org/security/FrontPage#SAML_V2.0_Standard and there https://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf

If you do decide to try writing it, you may make a PR request and we can see how we can help you to get it done properly.

[molekilla]

starting a fork

https://github.com/autentifactor/bell/commit/7e5b04663c67ece341a773ccdfa3729394f377c1

[molekilla]

I managed to use passport-saml with hapi. I think that it should be a separate plugin as it has a specific auth flow than OAuth (e.g. metadata endpoint). I probly work on this later this year, but suffice to say that integrating it to bell is not straightforward

[PaulMougel]

Thanks @molekilla for giving this is a spin! Would you care to share how you integrated passport-saml into hapi?

[molekilla]

here you go
https://github.com/molekilla/hapi-passport-saml

[hueniverse]

Closing due to inactivity.

[lock]

This thread has been automatically locked due to inactivity. Please open a new issue for related bugs or questions following the new issue template instructions.