4 ms·

If anyone knows an identity solution that supports bilateral and multilateral saml (federation of identity providers), automatic retrieval of metadata/certs, Oa

If anyone knows an identity solution that supports bilateral and multilateral saml (federation of identity providers), automatic retrieval of metadata/certs, Oauth, Oidc, group rules, IDP discovery (routing to IDP based on identifier), wayfless, and IP Authentication I would love to hear about it. We run a B2B that sells our web based service into education (primary to through to university) and have a small team so are always interested in solutions in this space.

deepakprab 5y ago
Great question, I would think Shibboleth might cover some of the topics you are looking for. I am not too experienced with the education sector, would love to chat further to get a better understanding.
- zwayhowder 5y ago
  I work in education, Shibboleth is indeed what we use for these types of things. You go through the shib portal and depending on your email address get redirected to your institutions SAML login and back. Somewhat similar to using Azure or Okta B2B integration, but with support for things that don't support native SAML and older legacy platforms that we just can't kill.
grinich 5y ago
I'd love to chat with you about this, but you don't have contact info listed in your HN profile. Can you send me a note?
mooreds 5y ago
We (FusionAuth) cover most of this. I think we do bilateral and multilateral SAML. More details in our docs: https://fusionauth.io/docs/v1/tech/core-concepts/integration-points#saml-integration-options https://fusionauth.io/docs/v1/tech/core-concepts/integration... We do OAuth, OIDC, and idp routing based on domain or id. We track ips and have the ability (in the Enterprise tier) to add IP ACLs, but I am not sure what you mean by IP authentication. I am not sure what you mean by wayfless, not familiar with that term. Feel free to reach out to me for more info if you'd like to chat, my contact info is in my profile.
- deepakprab 5y ago
  Hi mooreds, would love to get access to a FusionAuth account where we could set up and test your SAML identity provider (would also help us build an instructions guide for FusionAuth customers). Could you make this happen?
  - mooreds 5y ago
    Hi deepakprab, You can download and run the community version in a variety of formats. For testing you could spin up an ec2 instance if you'd like. Download it here: https://fusionauth.io/download https://fusionauth.io/download If you want us to manage it, you can sign up for a basic cloud here: https://fusionauth.io/pricing https://fusionauth.io/pricing Let me know if you have questions.
    - deepakprab 5y ago
      Amazing, thank you. I'll definitely reach out if I have any questions.
pharaohgeek 5y ago
Keycloak does a good bit of this and is open source. It's an outstanding project. It's my go-to for anything that requires login, especially for its SAML/OIDC support.

deepakprab 5y ago

Great question, I would think Shibboleth might cover some of the topics you are looking for. I am not too experienced with the education sector, would love to chat further to get a better understanding.

zwayhowder 5y ago
I work in education, Shibboleth is indeed what we use for these types of things. You go through the shib portal and depending on your email address get redirected to your institutions SAML login and back. Somewhat similar to using Azure or Okta B2B integration, but with support for things that don't support native SAML and older legacy platforms that we just can't kill.

grinich 5y ago

I'd love to chat with you about this, but you don't have contact info listed in your HN profile. Can you send me a note?

mooreds 5y ago

We (FusionAuth) cover most of this. I think we do bilateral and multilateral SAML. More details in our docs: https://fusionauth.io/docs/v1/tech/core-concepts/integration-points#saml-integration-options https://fusionauth.io/docs/v1/tech/core-concepts/integration... We do OAuth, OIDC, and idp routing based on domain or id. We track ips and have the ability (in the Enterprise tier) to add IP ACLs, but I am not sure what you mean by IP authentication. I am not sure what you mean by wayfless, not familiar with that term. Feel free to reach out to me for more info if you'd like to chat, my contact info is in my profile.

deepakprab 5y ago
Hi mooreds, would love to get access to a FusionAuth account where we could set up and test your SAML identity provider (would also help us build an instructions guide for FusionAuth customers). Could you make this happen?
- mooreds 5y ago
  Hi deepakprab, You can download and run the community version in a variety of formats. For testing you could spin up an ec2 instance if you'd like. Download it here: https://fusionauth.io/download https://fusionauth.io/download If you want us to manage it, you can sign up for a basic cloud here: https://fusionauth.io/pricing https://fusionauth.io/pricing Let me know if you have questions.
  - deepakprab 5y ago
    Amazing, thank you. I'll definitely reach out if I have any questions.

pharaohgeek 5y ago

Keycloak does a good bit of this and is open source. It's an outstanding project. It's my go-to for anything that requires login, especially for its SAML/OIDC support.