Any plans to support SAML?

[jacobg]

http://en.wikipedia.org/wiki/SAML_2.0
https://github.com/rohe/pysaml2

[omab]

No plans so far, but I'll keep this open to track it.

[jacobg]

Thanks. SAML has recently become a leading technology in SSO particularly in corporate.

[pitbulk]

Other python library: https://github.com/onelogin/python-saml

[jacobg]

As a general mission for this project, do you think it would be worthwhile to incorporate the corporate login providers such as OneLogin and Okta into python-social-auth? I think the standard for corporate space is to use SAML, so perhaps integrating SAML would then give this project more corporate value.

[bradenmacdonald]

@omab I am likely going to be implementing a python-social-auth SAML backend in the near future as part of bringing Shibboleth support to the software I work on (edX). It will depend on python-saml (linked two comments up), which in turn has a few other requirements and is only compatible with Python 2.7. Would you be willing to include that backend in python-social-auth, given the extra requirements and lack of Python 3 support? We'd love to contribute it so others can use it, if possible.

[pitbulk]

@omab @bradenmacdonald I'm working on a python3 version of the python-saml (forked by bgaifullin). https://github.com/pitbulk/python3-saml

[bradenmacdonald]

@pitbulk Glad to hear that; I wasn't sure of the status of that fork and if it was going to be made "official" at some point.

[pitbulk]

Yes, I plan to publish it soon, now is in testing phase. Feedback welcome ;)

[ashchristopher]

@bradenmacdonald I am looking at creating a SAML backend for python-social-auth as well - would you be interested in collaborating?

[bradenmacdonald]

@ashchristopher I have already more or less finished an implementation: #616 . Just waiting for review and feedback. Check it out and I'd be curious to know if it works for your use case or not.

[vsobolmaven]

Apparently a few of abstract methods are still not implement in pyramid_strategy.py to make saml work with pyramid. They are request_post(), request_get(), request_path(), request_is_secure(). Would be great to see this fixed. Thanks.

[bradenmacdonald]

@vsobolmaven Those should be quite simple to implement - I recommend you implement that yourself and open a pull request here to contribute it to the project.