Added by Ron Meske over 8 years ago
Hello,
I did a search and didn’t find anything mentioning Kerberos. Does OpenProject support Kerberos?
If it does, where can I find the documentation to set this up?
If not, what would it take to do this?
Regards,
Ron
Replies (3)
Hey Ron,
OpenProject does not explicitly support Kerberos in any available plugin, but since we employ OmniAuth as an authentication bridge and there seems to be a Kerberos implementation for it,
you can easily expose this strategy as an OpenProject plugin.
We have a guide for writing OmniAuth plugins: https://www.openproject.org/open-source/development/create-omniauth-plugin/
As a starting point, you can have a look at my LDAP auth plugin for OmniAuth: https://github.com/oliverguenther/openproject-auth_ldap
Best,
Oliver
Hi Oliver,
What about SAML? It looks like there is OmniAuth-SAML on GitHub (https://github.com/omniauth/omniauth-saml).
Since OpenProject supports OmniAuth is this an easy drop-in?
Regards,
Ron
Hi Ron,
true - we do actively support SAML. Integrating that strategy should be nothing more than installing the following plugin:
https://github.com/finnlabs/openproject-auth_saml
Best,
Oliver