Volto SAML authentication

[mtrebron (Norbert)]

Here are some of my experiences with trying to to implement SSO on Plone6 (Classic) two years ago.

Tilting at SSO windmills (LDAP / SAML2)

Sorry if ranting, in the past week I spent some time attempting to implement SSO on Plone6 and I'm a tad exhausted from the experience... My scenario is as follows: intranet on Plone6 classic users who are signed in to their (Windows / Mac / Linux) workstations with their organizational M$ Active Directory credentials My goal is to have these users log on automatically to the Plone instance, given that they are already logged in to their workstation. i.e. very much along the lines of Matt Ha…

Also possibly interesting, in case you haven't already seen...

New saml2 Plugin for Plone 6 based on python3-saml

Hi everybody TL;DR Install wcs.samlauth plugin Add PAS plugin via ZMI (in acl_users) Go to http://localhost:8080/Plone/acl_users/saml/idp_metadata Fetch or upload IDP metadata -> Click "Get and store metadata" Go to http://localhost:8080/Plone/acl_users/saml/metadata and configure your IDP Use http://localhost:8080/Plone/acl_users/saml/sls to login via IDP We still have many customers who require saml2 as preferred, respectively required, authentication method. There were some options for old…

TOTP/2FA for Plone

I need 2FA/TOTP in Plone - in this case ClassicUI 6.0.x or 6.1.x if available. What is the current state here? Are there plugins around? Any stubs/unfinished code to built on?

Dm.zope.saml2 unable to handle Microsoft metadata xml?

Hello, Been trying to use dm.zope.saml2 (5.0.1) by @dieter to connect to Microsoft metadata to no avail, although I am able to use it to connect to the metadata from other vendors. Traceback (innermost last): Module ZPublisher.WSGIPublisher, line 162, in transaction_pubevents Module ZPublisher.WSGIPublisher, line 359, in publish_module Module ZPublisher.WSGIPublisher, line 254, in publish Module ZPublisher.mapply, line 85, in mapply Module ZPublisher.WSGIPublisher, line 63, in call_o…