samlify | 🔐 Node.js API for Single Sign | Authentication library

by tngan TypeScript Version: 2.8.10 License: MIT

X-Ray Key Features Code Snippets Community Discussions(1)Vulnerabilities Install Support

kandi X-RAY | samlify Summary

samlify is a TypeScript library typically used in Security, Authentication, Nodejs applications. samlify has no bugs, it has no vulnerabilities, it has a Permissive License and it has low support. You can download it from GitHub.

Highly configuarable Node.js SAML 2.0 library for Single Sign On.

Support

Quality

Security

License

Reuse

Support

samlify has a low active ecosystem.

It has 545 star(s) with 220 fork(s). There are 22 watchers for this library.

It had no major release in the last 12 months.

There are 59 open issues and 283 have been closed. On average issues are closed in 130 days. There are 11 open pull requests and 0 closed requests.

It has a neutral sentiment in the developer community.

The latest version of samlify is 2.8.10

Quality

samlify has 0 bugs and 0 code smells.

Security

samlify has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

samlify code analysis shows 0 unresolved vulnerabilities.

There are 0 security hotspots that need review.

License

samlify is licensed under the MIT License. This license is Permissive.

Permissive licenses have the least restrictions, and you can use them in most projects.

Reuse

samlify releases are available to install and integrate.

Installation instructions, examples and code snippets are available.

It has 392 lines of code, 0 functions and 52 files.

It has low code complexity. Code complexity directly impacts maintainability of the code.

Top functions reviewed by kandi - BETA

kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of samlify

Get all kandi verified functions for this library.

samlify Key Features

No Key Features are available at this moment for samlify.

samlify Examples and Code Snippets

No Code Snippets are available at this moment for samlify.

Community Discussions

Trending Discussions on samlify

How to create a SAML IDP that authenticates with an API from scratch

QUESTION

How to create a SAML IDP that authenticates with an API from scratch

Asked 2021-Aug-02 at 16:27

Right now I'm rolled in a project where we want to create an SAML IDP with Node.

Problem: We have a system that implements an API REST and this API authenticates users, its response has the information of the authenticated user... just as an API response (nothing about SAML). The point is to aggregate the responses from the API in a SAML IDP system, where some SAML requests (XML) arrive from Service Providers. The SAML IDP system internally queries the API, gets the authentication information, and responds as a SAML Response (XML) to the Service Provider. I was looking for easy solutions for this problem like Okta, OneLogin, but the problem is that those companies authenticate the user and the one who authenticates in my system is the API, I can't change that because the project was defined as that.

My question is:

Do you know about a system that provides SAML configurations but authenticates with an external API?
We are using samlify Node Library to attack this problem, do you have information about the performance of this library?
Do you have any idea how to solve this problem easily?
We are planning to deploy with lambdas is this a good practice for this kind of problem?

I'm not an expert about SAML so if you have documents about creating a SAML IDP or any help would be useful.

Thank you for reading and sorry for my English.

...

ANSWER

Answered 2021-Aug-02 at 16:27

Do you know about a system that provides SAML configurations but authenticates with an external API?

First, you have to remember that SAML is a protocol; it's the language that a service provider may choose to speak to the identity provider. The task of validating user credentials and authenticating a user is entirely separate from the protocol. An SP may choose to send a SAML authentication request to an IdP, and the IdP is free to authenticate the user however it sees fit. The two usually have nothing to do with each other.

Second, there are plenty of IdPs that allow you to:

Turn on the SAML2 functionality so the IdP can speak the SAML2 protocol.
Validate user credentials using a custom REST API. The IdP would reach out to your API to validate the credentials it receives from the user, and would the finally produce a SAML2 response back to the SP.

An example of such an IdP would be: https://github.com/apereo/cas. It allows you to have it act as a SAML2 IdP and supports a REST API for user authentication.

While it may not 100% fit your use case OOTB, it's a good starting point. You should never begin from scratch and re-invent the wheel. To "create a SAML IDP that authenticates with an API from scratch" is generally a good way of asking for a lifetime of punishment.

PS Your other questions should likely be posted as separate posts/questions.

Source https://stackoverflow.com/questions/68581528

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install samlify

To install the stable version. Starting from v2.6, multiple schema validators are now supported. You can simply set the validator via the following global method. We have four validator modules right now, and you can write your own. The setSchemaValidator is required since v2.6, it will throw error if you don't set at the beginning. Now you can create your own schema validator and even suppress it but you have to take the risk for accepting malicious response. For those using Windows, windows-build-tools should be installed globally before installing samlify if you are using libxml validator.
See full documentation here.

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: