LDAP Client x509 Certificate Authentication

Google announced their LDAP service: https://support.google.com/cloudidentity/answer/9089736 and we wanted to see if we could get it working for our users.

However, it requires a client certificate to authenticate to the server, which SimpleSAMLphp doesn't support: https://simplesamlphp.org/docs/stable/ldap:ldap . It seems to only support username/password for client authentication.

It would be nice to be able to support client cert/key for authentication in addition to username/password. OpenLDAP supports it using TLS_CERT and TLS_KEY.

It seems that support for this may have only come into PHP in version 7.1: http://php.net/manual/en/function.ldap-set-option.php

Comienza con la documentación de LDAP de SimpleSAMLphp y la referencia de ldap_set_option de PHP enlazadas en el issue. Determina cómo deben configurarse los certificados y las claves de cliente junto con la autenticación mediante nombre de usuario y contraseña, incluidas las versiones de PHP compatibles. Se considera terminado cuando la autenticación LDAP puede usar el flujo basado en certificados sin eliminar el flujo existente basado en credenciales.