Bug 51539 - Automate SAML Apache Auth for Apps
Automate SAML Apache Auth for Apps
Status: NEW
Product: UCS
Classification: Unclassified
Component: App Center
UCS 4.4
Other Linux
: P5 enhancement (vote)
: ---
Assigned To: App Center maintainers
App Center maintainers
:
Depends on:
Blocks: 51537
  Show dependency treegraph
 
Reported: 2020-06-19 17:18 CEST by Ingo Steuwer
Modified: 2020-06-22 15:55 CEST (History)
2 users (show)

See Also:
What kind of report is it?: Feature Request
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Ingo Steuwer univentionstaff 2020-06-19 17:18:51 CEST
The App Center should offer an easy way to have an apache configuration that supports HTTP auth with SAML SSO, which can then be used by an App - for example using mod_auth_melon.

This would help to have SAML SSO for various Apps like Nagios, Grafana or to secure access to etherpad or dudle.
Comment 1 Florian Best univentionstaff 2020-06-22 09:54:44 CEST
To understand this correctly: Nagios (the only one i know for sure) uses HTTP basic auth. This should be used if a client accesses nagios to handle this via mod_auth_melon?

But how should this work for apps which are using a regular form-based authentication?
Comment 2 Ingo Steuwer univentionstaff 2020-06-22 15:55:14 CEST
(In reply to Florian Best from comment #1)
> To understand this correctly: Nagios (the only one i know for sure) uses
> HTTP basic auth. This should be used if a client accesses nagios to handle
> this via mod_auth_melon?
> 
> But how should this work for apps which are using a regular form-based
> authentication?

Some Webservices can be configured to "trust" the HTTP basic auth, for example Grafana:

https://grafana.com/blog/2015/12/07/grafana-authproxy-have-it-your-way/