laravel-saml2 | Laravel 5.4+ ] An integration to add SSO | Authentication library

by 24Slides PHP Version: 2.2.0 License: MIT

X-Ray Key Features Code Snippets(3)Community Discussions(2)Vulnerabilities Install Support

kandi X-RAY | laravel-saml2 Summary

laravel-saml2 is a PHP library typically used in Security, Authentication applications. laravel-saml2 has no bugs, it has no vulnerabilities, it has a Permissive License and it has low support. You can download it from GitHub.

[Laravel 5.4+] An integration to add SSO to your service via SAML2 protocol based on OneLogin toolkit with support of multiple Identity Providers

Support

Quality

Security

License

Reuse

Support

laravel-saml2 has a low active ecosystem.

It has 123 star(s) with 46 fork(s). There are 6 watchers for this library.

It had no major release in the last 12 months.

There are 27 open issues and 20 have been closed. On average issues are closed in 42 days. There are 3 open pull requests and 0 closed requests.

It has a neutral sentiment in the developer community.

The latest version of laravel-saml2 is 2.2.0

Quality

laravel-saml2 has 0 bugs and 14 code smells.

Security

laravel-saml2 has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

laravel-saml2 code analysis shows 0 unresolved vulnerabilities.

There are 1 security hotspots that need review.

License

laravel-saml2 is licensed under the MIT License. This license is Permissive.

Permissive licenses have the least restrictions, and you can use them in most projects.

Reuse

laravel-saml2 releases are available to install and integrate.

Installation instructions are not available. Examples and code snippets are available.

It has 1236 lines of code, 112 functions and 29 files.

It has medium code complexity. Code complexity directly impacts maintainability of the code.

Top functions reviewed by kandi - BETA

kandi has reviewed laravel-saml2 and discovered the below as its top functions. This is intended to give you an instant insight into laravel-saml2 implemented functionality, and help decide if they suit your requirements.

Resolve a single tenant .
Bootstrap one - to - one
Render tenants .
Convert string to array
Authenticates the user .
Get supported name ids formats .
Handles the tenant .
Parse a SAML attribute
Boot the console commands
Logs the logout .

Get all kandi verified functions for this library.

laravel-saml2 Key Features

No Key Features are available at this moment for laravel-saml2.

laravel-saml2 Examples and Code Snippets

Usage,Middleware

PHP

Lines of Code : 22

License : Permissive (MIT)

Copy

/*
|--------------------------------------------------------------------------
| Built-in routes prefix
|--------------------------------------------------------------------------
|
| Here you may define the prefix for built-in routes.
|
*/

'routesM

Examples,Azure AD

PHP

Lines of Code : 19

License : Permissive (MIT)

Copy

php artisan saml2:create-tenant \
  --key=azure_testing \
  --entityId=https://sts.windows.net/fb536a7a-7251-4895-a09a-abd8e614c70b/ \
  --loginUrl=https://login.microsoftonline.com/fb536a7a-7251-4895-a09a-abd8e614c70b/saml2 \
  --logoutUrl=https://l

Usage,Authentication events

PHP

Lines of Code : 17

License : Permissive (MIT)

Copy

Event::listen(\Slides\Saml2\Events\SignedIn::class, function (\Slides\Saml2\Events\SignedIn $event) {
    $messageId = $event->getAuth()->getLastMessageId();
    
    // your own code preventing reuse of a $messageId to stop replay attacks

Community Discussions

Trending Discussions on laravel-saml2

Laravel saml2 metadata encryption block

A valid SubjectConfirmation was not found on this Response, laravel and saml2

QUESTION

Laravel saml2 metadata encryption block

Asked 2020-Nov-10 at 07:33

I can't understand, how to generate for the metadata file block in the Laravel application. The app uses aacotroneo/laravel-saml2 and onelogin/php-saml packages. In settings I tried to set 'wantNameIdEncrypted' => true and/or 'wantAssertionsEncrypted' => true. But in the /saml2/idpName/metadata I see only . Maybe it is because I am on the local environment?
I am stuck with this problem for many hours and will be grateful for any explanation about how this blocks are generated and how to use both of them.

...

ANSWER

Answered 2020-Nov-10 at 07:33

My problem was that I just didn't add 'security' key to the mentioned parameters. They were in the end of example file without any keys and I thought, that it is enough to just uncomment right lines, but no, they are a part of security config.

Source https://stackoverflow.com/questions/64704225

QUESTION

A valid SubjectConfirmation was not found on this Response, laravel and saml2

Asked 2020-Nov-05 at 17:47

I've been stuck for the last couple of days trying to figure out why the response which Im getting from the IdP is being rejected from the package I'm using. Im using this https://github.com/aacotroneo/laravel-saml2 This is the response that Im getting :

...

ANSWER

Answered 2020-Nov-05 at 17:47

From looking at the NotBefore and NotOnOrAfter timestamps in the Response, Ping is set to a 5min clock skew which is normal/default.

Without more specific error messages, it sounds like there is a clock drift issue between the IDP Server (PF) and your SP Application if your SP is complaining about the NotBefore. Ensure both servers have not only the proper time but also the proper timezone in the OS settings. You might need to restart PF to get it to pick-up any changes to the system time if you make any.

Source https://stackoverflow.com/questions/64676954

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install laravel-saml2

You can download it from GitHub.
PHP requires the Visual C runtime (CRT). The Microsoft Visual C++ Redistributable for Visual Studio 2019 is suitable for all these PHP versions, see visualstudio.microsoft.com. You MUST download the x86 CRT for PHP x86 builds and the x64 CRT for PHP x64 builds. The CRT installer supports the /quiet and /norestart command-line switches, so you can also script it.

Support

Sometimes, you need to create links to your application with support of SSO lifecycle. It means you expect a user to be signed in once you click on that link. The most popular example is generating links from emails, where you need to make sure when user goes to your application from email, he will be logged in. To solve this issue, you can use helpers that allow you create SSO-friendly routes and URLs — saml_url() and saml_route(). To generate a link, you need to call one of functions and pass UUID of the tenant as a second parameter, unless your session knows that user was resolved by SSO. To retrieve UUID based on user, you should implement logic that links your internal user to a tenant.

Find more information at: