3 ms·
Yeah, my experience is precisely the same re: OpenID. Is that SAML2 IdP code open? Things have..slowly... improved within the SAML2 ecosystem, but if you've f
by iheartmemcache 11y ago
Yeah, my experience is precisely the same re: OpenID.
Is that SAML2 IdP code open?
Things have..slowly... improved within the SAML2 ecosystem, but if you've found a better alternative (SSO for the average Joe - preferably with 2FA a la YubiKey) let me know.
- thaeli 11y agoSimpleSAMLphp is quite straightforward; use the Yubikey auth source and you get their 2FA very easily. SAML2 will never be quite as easy to configure as OpenID in practice, but it's the least painful setup I've seen. (Yes, I include several of the big commercial authentication-as-a-service vendors in that comparison.) Having the ability to easily manipulate attributes at a per-SP level makes integrating with semi-broken vendor implementations much more practical. There are modules available to add OpenID and OAuth; I use the OpenID module in production and have been quite happy with it.