it seems that saml looks a lot like the distributed authentification that drupal does. i like the idea of saml better; it is standard, it enables autorisation and is closer to a real directory database. anyone wants to take a look at the saml possibilities vs the current drupal style and if needed rewrite the user module so it support saml as well?

Comments

bertboerland’s picture

bertboerland commented
Component: User system » user.module

(related request closed, see http://drupal.org/node/view/3695)

jonbob’s picture

jonbob commented
alexandreracine’s picture

alexandreracine commented
Version: » 4.5.0
Status: Active » Closed (fixed)

No feedback and this is old, so...

This was for version x.y.z.
Closing. Feel free to reopen.

matt_paz’s picture

matt_paz commented
Title: saml vs distributed authentification » saml authentification
Version: 4.5.0 » 7.x-dev
Status: Closed (fixed) » Active

Would be great to incorporate saml 2 support as part of drupal 7 core

bjcool’s picture

bjcool commented

subscribe

bertboerland’s picture

bertboerland commented

I think that the combination of https://opensso.dev.java.net/public/extensions/ and http://blogs.sun.com/superpat/entry/opensso_single_sign_on_module might do the trick for 6.x

agerson’s picture

agerson commented

SAML support would be great. If our users were authenticated to our existing intranet, they would not have to reauthenticate to drupal.

bertboerland’s picture

bertboerland commented

see http://blogs.sun.com/superpat/entry/opensso_single_sign_on_module for d6. for d7 oen can only jope that this module will be ported to 7. not to sure what oracle is up to with sun and if sun will contribute this module as well for d7.

matt_paz’s picture

matt_paz commented
Status: Active » Postponed

I was excited by the prospects/potential for getting this in core, but D7 core has been in code freeze for a while ... and given the current user base for SAML, it probably wouldn't have made sense to put in core anyway.

For those of you who need SAML support today, I've had good experiences with both of the modules below in D6 ...

http://drupal.org/project/shib_auth/
http://code.google.com/p/drupalsimplesaml/

colan’s picture

colan
he/him
Primary language English
Location Toronto 🇨🇦
commented
Title: saml authentification » SAML authentication
Version: 7.x-dev » 8.x-dev
Status: Postponed » Active

This is definitely not getting into D7.

bertboerland’s picture

bertboerland commented

if we need this in core after all...? best to have it in a contrib module

mdupont’s picture

mdupont
Primary language French
Location Switzerland
commented
Status: Active » Closed (won't fix)

I think this issue can be closed. There are perfectly fine contrib modules to handle SAML-based authentication, and I don't think it belongs to Drupal core. If it were the one golden standard everyone uses for authentication, why not, but this is not the case and there are many competing solutions in this area.