SSO login on portal

Posted by ddessertine on 08-Mar-2019 10:41

Hi,

On the documention of version 5 I can't find if it's possible to configure SSO login on portal.

I have an Object Collaborateur, Contact type.

I can connect from login form, my customers want to login to the portal from their SSO (Azure, SAML or Google).

Is it possible ?

As a workarround I actually use SimpleSAMlPhp to mock the authentication, and it's not comfortable.

Regards

David

Rollbase - Forum
Posted by hmarrout on 11-Mar-2019 05:49

Hi David

The Authentication is strongly typed to the "USER" object. Configuring SAML auth in tenant will use the User object. Without using a "USER" object, authentication through SAML is not supported in Rollbase.

the below documentation link will help you understand SAML authentication configuration in Rollbase.

https://documentation.progress.com/output/rb/doc/index.html#page/rb%2Fconfiguring-saml-2fadfs-authentication-for-a-tenan.html%23

Thanks and Regards

Hariteja

All Replies

Posted by hmarrout on 08-Mar-2019 13:47

Hi,

Portal SSO works as follows

  1. The portal login page must be configured with USER object.
  2. Login to Rollbase using SSO (Azure, SAML or Google).(if configured)
  3. Hit the Portal URL and you can see the portal is logged in automatically.
  4. If the user is not logged in, and he is hitting the portal URL then he would be redirected to the login page of the portal( this will take API credentials of that particular user to log into the portal)

If you are expecting the user to redirect to SSO login page via portal login page, this is not possible with the current implementation of portals. The SSO login has to be done from other means like IDP login page or rollbase login page, then redirecting to the portal page will automatically log you into your portal without asking any credentials.

Posted by ddessertine on 08-Mar-2019 14:31

Hi,

Ok, but I can't use USER, my object is constructed on Contact. Our solution is big (~200 Mo xml total, in 13 application) and we can't refactor it to do that.

Can you your latest explanation : if I have Azure, Google or SAML as IDP (what I want) how can I login users ?

have you got a concrete exemple implementing Google or Azure as IDP for exemple ?

Regards

David

Posted by hmarrout on 11-Mar-2019 05:49

Hi David

The Authentication is strongly typed to the "USER" object. Configuring SAML auth in tenant will use the User object. Without using a "USER" object, authentication through SAML is not supported in Rollbase.

the below documentation link will help you understand SAML authentication configuration in Rollbase.

https://documentation.progress.com/output/rb/doc/index.html#page/rb%2Fconfiguring-saml-2fadfs-authentication-for-a-tenan.html%23

Thanks and Regards

Hariteja

This thread is closed