simplesamlphp / simplesamlphp/simplesamlphp-module-discopower

Filter entities globally?

Open
#29 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
PHP
Stars
5
Forks
11
PR merge metrics
No merged PRs in 30d

Description

According to the docs, filtering identity providers is possible per SP.

We have 100s of SPs, and now I'm looking for a way to show a specific IdP only for a few SPs.

The only way I could make this work was by applying a snippet to those few SPs:

  'discopower.filter' => [
      'tags.include' => [
         'all'
      ],
      'entities.include' => [
          'https://needle.idp',
      ],
  ],

and then on every other SP excluding it:

  'discopower.filter' => [
      'entities.exclude' => [
          'https://needle.idp',
      ],
  ],

As said this works but a bit cumbersome as I'd have to make sure this will be there for each new SP etc.

Would it makes sense to be able to supply such a config at a higher level, for example in saml20-idp-hosted.php or some other place?

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the filtering section in docs/discopower.md and compare its per-SP configuration with the proposed saml20-idp-hosted.php location. Trace how discovery filters are loaded for each SP and determine where a higher-level setting could be applied. Done means the desired IdP visibility can be configured globally without adding snippets to every SP.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
authentication
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.