Trying to configure SAML Authentication extension

[TheMoodBoardz]

I feel like I am blind, but I can't see what & where I am meant to configure the SAML extension.

I have tried reading over the manual for configuration, but it doesn't exactly point out where to configure & what variables you need to configure.

Any help is appreciated.

[joseph]

@TheMoodBoardz have you seen https://docs.cloudron.io/apps/guacamole/#extensions ?

[TheMoodBoardz]

@joseph Yes I have but the bit of docs for the SAML doesn't make it clear what custom properties it needs.

[joseph]

@TheMoodBoardz Do you mean https://guacamole.apache.org/doc/gug/saml-auth.html ? I have never used SAML but some property names are listed in https://guacamole.apache.org/doc/gug/saml-auth.html#configuring-guacamole-for-saml-authentication

[joseph]

I found this

and also https://docs.netcubed.io/products/guacamole/authentication/saml/ and https://blog.daniel.wydler.eu/2023/04/16/saml-authentifizierung-fuer-apache-guacamole/ (german)

[TheMoodBoardz]

@joseph So I have managed to find what I need what have been unable to locate what "openid-redirect-uri" is... It says it would be from the provider but that isn't correct.

[joseph]

@TheMoodBoardz mm, openid and saml are totally different protocols . Why do you need openid-redirect-uri for saml?

[TheMoodBoardz]

@joseph Sorry meant "saml-callback-url".... I am trying both OpenID & SAML to see which one will start working.

[TheMoodBoardz]

Ok, I have managed to get it working... it seems that the type of "openid-jwks-endpoint" I was using was not correct.