# Feature OP-9556 - User interface for SAML configuration

Project: OpenProject
Status: closed
URL: https://community.openproject.org/work_packages/OP-9556

## Planning

| Attribute | Value |
| --- | --- |
| Date |  |
| Priority | Medium |
| Target versions | 15.0.0 |
| Sprint | 15.0.0 |
| Backlog bucket |  |
| Votes | 3 |
| List |  |
| Roadmap |  |
| Relevance |  |

## OPEN POINTS / FEEDBACK

_No work packages_

## Features and Chunks

| ID | Subject | Type | Status | Assignee | Target versions | Spent time |
| --- | --- | --- | --- | --- | --- | --- |
| OP-15507 | Implement basic border box table | Implementation | closed |  | 14.4.0 |  |

## Bugs and other work packages

_No work packages_

## Technical Details

| Attribute | Value |
| --- | --- |
| Module |  |
| Feature Flag |  |
| Requires doc change | No |
| Enterprise plan |  |

## Details

| Attribute | Value |
| --- | --- |
| Pull preview |  |
| Mockups | https://www.figma.com/design/EtJJoh9dTT9Tcb1Sf2UDCg/SAML?node-id=0-1 |
| Found in mobile app version |  |
| Follow-up feedback e-mail |  |
| Accessibility | No |

## People

| Attribute | Value |
| --- | --- |
| Assignee | Simon Pfaff |
| Accountable |  |
| Product manager |  |
| Developers | Oliver Günther |
| Designer | Parimal Satyal |
| Ordered by |  |
| Signed off by |  |
| Interest by |  |

## Estimates and progress

| Attribute | Value |
| --- | --- |
| PD (min) |  |
| PD (max) |  |
| Work |  |
| Labor costs |  |

## Description

**As** an OpenProject admin  
**I want to** be able to configure SAML using a user interface  
**so that** I don't have to use a command line and can see potential errors more easily.

Also: Due to the lack of a user interface it's currently impossible to configure SAML yourself unless you are self-hosting. In which case you have to do it by editing a yml file or using the rails console, both of which are not very user friendly ways of doing this.

**Acceptance criteria**

  - a screen allowing the configuration of SAML under Administration -\> Authentication -\> SAML identity providers

  - Use default common mapping schemes for user attributes

  - Show the number of users connected to the authentication mode

  - Allow metadata exchange to be filled using a URL or XML
    
      - It should pre-fill new configurations with the most common options by default
    
      - allow pre-filling the options based on a given metadata URL

**Nice to have**

  - provide a way to debug the authentication method

  - show the most recent authentication attempts along with potential errors that occured during it (e.g. missing fields that have to be configured in the SAML server)