Extension SAML2 Authentication Legacy


Extension Basics

Title
SAML2 Authentication Legacy
Name
ckanext-saml2
Type
Public extension
Description
Legacy SAML 2.0 authentication implementation for single sign-on integration with identity providers.
CKAN versions
Download-Url (zip)
Download-Url commit date
2020-05-28
Url to repo
Category
Authentication & Security


Background Infos

Description (long)
Show details

The SAML2 Authentication Legacy extension provides foundational SAML 2.0 single sign-on authentication capabilities for CKAN, implementing core authentication protocols for integration with enterprise identity providers and federated authentication systems through standardized SAML-based identity federation. This foundational extension establishes basic SAML 2.0 authentication workflows, enabling users to authenticate through existing organizational identity infrastructure including Active Directory Federation Services, Shibboleth, and other SAML-compliant identity providers without requiring separate CKAN credentials. The system supports standard SAML authentication flows with basic user provisioning, attribute mapping, and session management for seamless integration with organizational identity management systems. Core features include SAML assertion processing, basic attribute extraction from SAML responses, and fundamental integration with CKAN’s user authentication system for automated login workflows. The extension provides essential SAML metadata handling, basic certificate management for SAML signature verification, and standard SAML protocol compliance for interoperability with common identity providers. Administrative functionality includes basic SAML configuration management, authentication logging for troubleshooting, and fundamental user mapping capabilities for organizational identity integration. Integration capabilities support standard SAML metadata exchange, basic identity provider configuration, and compatibility with common enterprise identity management systems through standard SAML protocols. The system implements core security features including SAML assertion validation, basic session management, and standard SAML security protocols for secure authentication workflows. Essential for organizations requiring basic SAML authentication integration, enterprises implementing foundational single sign-on capabilities, institutions needing standard identity provider connectivity, and deployments where basic SAML compliance, fundamental authentication integration, and standard identity federation are sufficient for organizational authentication requirements and basic enterprise identity management needs.

Version
Latest
Version release date
2020-05-28
Contact name
Datopian Team
Contakt email
Contact Url
(not set)


Installation Guide

Configuration hints

Legacy SAML2 authentication with basic identity provider integration

Plugins to configure (ckan.ini)
saml2
CKAN Settings (ckan.ini)
# ckanext.saml2.idp_metadata = /path/to/idp-metadata.xml # ckanext.saml2.sp_entity_id = https://your-ckan.com # ckanext.saml2.sp_acs_url = https://your-ckan.com/saml2/acs # ckanext.saml2.attribute_map.email = urn:oid:0.9.2342.19200300.100.1.3 # ckanext.saml2.attribute_map.fullname = urn:oid:2.5.4.3 # ckanext.saml2.enable_logout = true
DB migration to be executed
(not set)
<< back to Extensions