ReviewBoard SAML SSO (Single-Sign On)

[Jimmy Huang]

I was looking in the ReviewBoard authentication settings and by default we are using LDAP. I see that there is no option to provide IDP metadata for SAML 2.0.

Is there a plug-in/extension or install from python/reviewboard to enable this capability? For example, I know Jenkins have a SAML plug-in that needed to be installed to enable SAML.

Thanks,

Jimmy

[Jimmy Huang]

Hi All,

If it is not possible, I can try to integrate SAML into the existing Django app itself. However, in the authentication in the GUI, I'm not sure how I can edit the mode of authentication to a new mode (SAML)

Right now it is set to LDAP and I need to be able to select SAML 2.0. I have added parts of SAML using https://github.com/knaperek/djangosaml2 as well as our own generated IdP metadata.

Jimmy

[Vlad S.]

I use mod_auth_mellon + custom very basic auth module which authenticates RB user using REMOTE_USER set by mod_auth_mellon.

пятница, 30 октября 2020 г. в 22:56:21 UTC+3, roe135...@gmail.com:

[Christian Hammond]

We're working on official SSO support, including SAML. Right now, we're focusing on the last work for Review Board 4.0 (which has been delayed due to some coordination between a number of modules that were impacted by newer Python and Django releases), but we'll be preparing to get it ready for release after. It will ship as a feature in Power Pack.

Christian

--
Supercharge your Review Board with Power Pack: https://www.reviewboard.org/powerpack/
Want us to host Review Board for you? Check out RBCommons: https://rbcommons.com/
Happy user? Let us know! https://www.reviewboard.org/users/
---
You received this message because you are subscribed to the Google Groups "Review Board Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to reviewboard...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/reviewboard/d4b8e859-7013-46ee-b8dc-cb09e12ba4cfn%40googlegroups.com.

--

Christian Hammond

President/CEO of Beanbag

Makers of Review Board

[Jimmy Huang]

I'm also trying to use mod_auth_mellon, can you share what are your changes to create your "custom very basic auth module" to pass the REMOTE_USER information from mod_auth_mellon?

[Vlad S.]

I need some time to prepare a sample.

понедельник, 16 ноября 2020 г. в 21:42:51 UTC+3, roe135...@gmail.com:

[Jimmy Huang]

No problem! Thanks for the help !

[Erian Suwandi]

Hi Christian,

I want to confirm whether this official SSO support has been released in Power Pack? Thanks