and 389 as backend ldap.
It Handles more than 3000 accounts and groups updated mostly from an
The 389 was also used as Unix/Linux ldap authentication.
Le mer. 26 janv. 2022 à 12:05, N R <randria.nicolas(a)gmail.com> a écrit :
I've done some SAML SSO integrations and work regularly with FreeIPA.
SSO is usually handled via a protocol like SAML, OpenID or Shibboleth,
FreeIPA only serves as LDAP Identity database in these architectures.
Our deployments used a "proxy" to handle these authentications and link
them with LDAP, SimpleSAMLPHP.
The implementation also depends a lot on the way you want to do SSO,
centralized, federated, or cooperative.
I would recommend to take a look at simplesamlphp documentation as it
supports almost every SSO protocols and can easily be integrated to proxy
SSO web requests.
Le lun. 10 janv. 2022 à 19:50, Jonathan Aquilina <jaquilina(a)eagleeyet.net>
a écrit :
> Good Evening,
> I am just wondering can 389 along side free ipa be used to offer SSO
> 389-users mailing list -- 389-users(a)lists.fedoraproject.org
> To unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
> Fedora Code of Conduct:
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> Do not reply to spam on the list, report it:
389-users mailing list -- 389-users(a)lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
Fedora Code of Conduct:
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
Do not reply to spam on the list, report it: