simplesamlphp / simplesamlphp/simplesamlphp-module-discopower
Filter entities globally?
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 5
- Forks
- 11
- PR merge metrics
- No merged PRs in 30d
Description
According to the docs, filtering identity providers is possible per SP.
We have 100s of SPs, and now I'm looking for a way to show a specific IdP only for a few SPs.
The only way I could make this work was by applying a snippet to those few SPs:
'discopower.filter' => [
'tags.include' => [
'all'
],
'entities.include' => [
'https://needle.idp',
],
],
and then on every other SP excluding it:
'discopower.filter' => [
'entities.exclude' => [
'https://needle.idp',
],
],
As said this works but a bit cumbersome as I'd have to make sure this will be there for each new SP etc.
Would it makes sense to be able to supply such a config at a higher level, for example in saml20-idp-hosted.php or some other place?
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the filtering section in docs/discopower.md and compare its per-SP configuration with the proposed saml20-idp-hosted.php location. Trace how discovery filters are loaded for each SP and determine where a higher-level setting could be applied. Done means the desired IdP visibility can be configured globally without adding snippets to every SP.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- authentication
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100