Bookstack: Adding SAML support

[Xen3r0]

For Feature Requests

Desired Feature:
Adding SAML support for authentication method with LightSAML or another component.

Link:
https://www.lightsaml.com/

[ssddanbrown]

Hi @Xen3r0, I'd like to add SAML support but I'm not very familiar with the standard and maintaining another Auth method can be a lot of work.

I'd need to learn SAML and explore how it works. I'll leave this open and we'll see if it get's requested further otherwise I'll have to wait until I've got a large block of time to learn SAML and SSO standards.

[Ethanb00]

I'm curious what types of SAML provider folks are using. My org is using Okta. The implementation of an Okta integration is quite well documented and doesn't seem too intense:

http://developer.okta.com/standards/SAML/

[s0n-]

I would be very interested in Okta integration as well since Bookstack is shaping up to be our corporate Wiki.

[jacksonp2008]

Based on your other auth methods here @ssddanbrown , I don't think OKTA integration would be very difficult for you.

We are very interested in seeing OKTA support, happy to test or help any way we can.

[poVoq]

https://github.com/onelogin/php-saml
This seems to be the new go-to lib for open php source projects wishing to implement saml author.

[therealscottcarlow]

Bump. My org is very big on SAML SSO and adding this feature to Bookstack would be a phenomenal addition. I would offer to help put it together, but I'm not a PHP developer. I do, however, know quite a bit about SAML if you get around to putting this together and want to bounce questions off of someone.

[cb3inco]

+1 for this. Or a way to use headers to inject the users auth details as we are using a service to do this and that way the server can live behind a authentication mechanism.

[t-aus-m]

+1, I would also appreciate SSO and SAML a lot, we're using Keycloak currently.

[Orchal]

+1, I would appreciate a CAS apereo support too.

[ataraxus]

Also looking for a way to use Keycloak with BookStack saml or openid connect would be very appreciated

[koenhendriks]

Same here, Our organisation is using Okta and this application as internal Knowledge base. We would love to have SAML authentication for this.

[boblmartens]

We would love CAS support as well.

[vsegdacocacola]

+1 for SAML

[reavessm]

+1 for Keycloak

[KroonCo]

+1 for SAML functionality

[erosinger]

+1 for SAML

[Xiphoseer]

I wrote a PR adding SAML support in #1576. It works mostly like a new SAML socialite plugin and uses laravel-saml2, but also mirrors the LDAP support for groups.

[amelie-excent]

+1 for SAML

[ssddanbrown]

As per #1576 and #1787, Initial SAML2 support has been merged into master and will be in the next feature release, v0.28, which is targeted for about mid/late December. Therefore I will now close this request.

[bendem]

I see support was added, but the documentation mentioned here doesn't seem to be available. Is there any other place I can find it?
https://github.com/BookStackApp/BookStack/blob/c055310507ba27154eaf71d70c7bc3082fb5fd1d/.env.example.complete#L222

[ssddanbrown]

Hi @bendem,
This has not yet made a release. The current release is taking a little while longer than expected. That documentation URL will exist after the next release is deployed.