simplesamlphp / simplesamlphp/simplesamlphp
Configurable SP metadata?
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 1.1k
- Forks
- 704
- Avg merge
- 1d 15h
- Merged PRs (30d)
- 4
Description
I have a rather complex setup using simpleSAMLphp to run a number of service providers. For regionalization reasons (thanks, GDPR), they all respond to the same entityID. My primary SP also includes the regional ACS endpoints so that folks at the various regions can be passed along appropriately.
I would like the ability to be able to configure certain parts of the SP metadata output (ACS endpoints, Single Logout Service location, etc.) from config.php. Right now I am making these changes via patches to simplesamlphp/modules/saml/www/sp/metadata.php, but that is fragile and doesn't let me configure on a per-SP basis.
If I were to submit a PR that allowed for config.php customizability of these endpoints, would that be something the project would be interested in? Or, is there another way to accomplish what I need to do with the existing code?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with simplesamlphp/modules/saml/www/sp/metadata.php and the existing config.php usage. Trace how SP metadata is generated and determine how ACS endpoints and Single Logout Service locations could be customized per SP. Done would mean a project-supported configuration path rather than fragile patches, with the requested metadata values configurable from config.php.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- authentication
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100