Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Multiple saml integrations with the same entity ID #123

Open
lgarvey opened this issue Mar 6, 2021 · 0 comments
Open

Multiple saml integrations with the same entity ID #123

lgarvey opened this issue Mar 6, 2021 · 0 comments

Comments

@lgarvey
Copy link
Contributor

lgarvey commented Mar 6, 2021

I have a dilemma: I need to integrate with multiple AWS services via IdP initiated Saml. Unfortunately, AWS has a single entity ID for all services so I need a way of having two ServiceProvider entries with the same entity_id.

This was solved previously by overriding the relevant djangosaml2idp.views and supporting an sp alias e.g

https://github.com/uktrade/staff-sso/blob/master/config/settings.py#L468-L484

https://github.com/uktrade/staff-sso/blob/master/sso/samlidp/views.py#L141-L144

However, it'd be great if I could modify the djangosaml2idp package to avoid having to override entire blocks of code.

I'm wondering if a field on the ServiceProvider model -- e.g. aliased_entity_id or real_entity_id or something -- which if present takes precedence over the entity_id field, might work.

This would then enable ?sp=some-alias, e.g.

/idp/sso/init?sp=aws-quicksight

What do you think?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant