4 ms·

It appears to be much, much simpler to just integrate JWT into your system than deploy a SAML identity provider. I would love to see an easy to deploy decent SM

It appears to be much, much simpler to just integrate JWT into your system than deploy a SAML identity provider. I would love to see an easy to deploy decent SML IdP, but so far I have not found one. If anyone has any recommendations I would love to hear them.

brazzledazzle 9y ago
If you're looking for a self-hosted solution I can't help but as far as a provider goes we've had decent success with Okta. Of course SAML kind of sucks no matter how you slice it and Okta seems to think the future is in standards like openID connect.
sytringy05 9y ago
They dont exist! IMHO ADFS is actually the best of a bad lot. Your friendly Windows Admin can setup the SSO in a matter of minutes without having to know the spec inside out and upside down. The other platforms I've used or integrated with - Tivoli, Layer 7, Ping Federate, a huge hack job written in PHP - all took weeks/months to get working. That said I haven't tried Spring SAML recently, so maybe that is painless now. But probably not
thaeli 9y ago
I've been happy with SimpleSAMLPhp in production for about 6 years now. Configuration was very straightforward and the whole process was order-of-magnitude simpler than any other SAML IdP we tried at the time.
vetinari 9y ago
Keycloak (http://www.keycloak.org/ http://www.keycloak.org/) is quite easy to deploy. For our usage, even that was overkill and we are using Ipsilon (https://ipsilon-project.org/ https://ipsilon-project.org/), with IPA backend. It is more quirky, docs are scarce, but it works for us. On app side, it is mod_auth_mellon.
rb12345 9y ago
Shibboleth should cover the "decent" side of your question, given it's pretty heavily used in academia. The SP side of things is fairly straightforward to setup; whether the IdP counts as easy to deploy is probably a matter of opinion and experience.

4 ms·

It appears to be much, much simpler to just integrate JWT into your system than deploy a SAML identity provider. I would love to see an easy to deploy decent SM

by wichert 9y ago

brazzledazzle 9y ago
If you're looking for a self-hosted solution I can't help but as far as a provider goes we've had decent success with Okta. Of course SAML kind of sucks no matter how you slice it and Okta seems to think the future is in standards like openID connect.
sytringy05 9y ago
They dont exist! IMHO ADFS is actually the best of a bad lot. Your friendly Windows Admin can setup the SSO in a matter of minutes without having to know the spec inside out and upside down. The other platforms I've used or integrated with - Tivoli, Layer 7, Ping Federate, a huge hack job written in PHP - all took weeks/months to get working. That said I haven't tried Spring SAML recently, so maybe that is painless now. But probably not
thaeli 9y ago
I've been happy with SimpleSAMLPhp in production for about 6 years now. Configuration was very straightforward and the whole process was order-of-magnitude simpler than any other SAML IdP we tried at the time.
vetinari 9y ago
Keycloak (http://www.keycloak.org/ http://www.keycloak.org/) is quite easy to deploy. For our usage, even that was overkill and we are using Ipsilon (https://ipsilon-project.org/ https://ipsilon-project.org/), with IPA backend. It is more quirky, docs are scarce, but it works for us. On app side, it is mod_auth_mellon.
rb12345 9y ago
Shibboleth should cover the "decent" side of your question, given it's pretty heavily used in academia. The SP side of things is fairly straightforward to setup; whether the IdP counts as easy to deploy is probably a matter of opinion and experience.