Page 1 of 1

Single Sign On SSO openid saml

Posted: Sun May 17, 2020 2:23 pm
by kkeller
Dear Nubuilder team,

I would like to use nuBuilder but I wonder how I can use it with i.e. keycloak to sign in via SSO.

I dont mind if it is via SAML2 or OpenID.

I would also need to be able to create and update users through an API, direct DB access or OpenId or SAML token.
In my wildest dreams I would also need a solution to block user from signin in or deactivate them and be be able to ultimately delete them
centrally from the IDP.

I would prefer openid and oauth2 since I think it is also easier to map token scopes (or alternatively claims ) to nuBuilder permissions or roles respectively.

I would not quite know how to achieve that with saml.

Would there be a way to achieve this to somehow hook into Nubuilders auth system?

Thank you!

Re: Single Sign On SSO openid saml

Posted: Sun May 17, 2020 6:07 pm
by kev1n
Hi,

You would have to modify the functions like nuCheckStandaloneUserLoginRequest(), nuCheckStandaloneGlobeadminLoginRequest() etc. in nuprocesslogins.php
by using a library like PHP OpenID Connect Basic Client

I've never done anything like this before so I'm afraid I can't be of much help...

You could also get in touch with the nuBuilder Forte Specialists