<![CDATA[question about SAML authentication]]>hello.
I was wondering if cloudron could act as a SAML2.0 IDP for users.
thanks in advance

]]>https://forum.cloudron.io/topic/11305/question-about-saml-authenticationRSS for NodeSat, 11 Jul 2026 02:46:52 GMTThu, 14 Mar 2024 03:45:49 GMT60<![CDATA[Reply to question about SAML authentication on Thu, 11 Apr 2024 22:57:57 GMT]]>@mrhyk93 well actually, I did get openID connect to work with cloudflare access to cloudron.
the only caviot is that it can only except 35 characters for the secret.
they also except Google authentication, Facebook, and GitHub.
however, when using duo, that is, for cloudflareaccess, only supported for SAML.
while duo has generic OIDC, AD or SAML needs to be configured, and if i'm correct, cloudron, by itself, does not hold AD, just things like lDAP, with no actual AD.

]]>https://forum.cloudron.io/post/86805https://forum.cloudron.io/post/86805Thu, 11 Apr 2024 22:57:57 GMT<![CDATA[Reply to question about SAML authentication on Tue, 09 Apr 2024 07:42:42 GMT]]>I would like to see SAML support, many major services only works with SAML, like AWS new IAM Manager, or cloudflare Access in Zero Trust offering

]]>https://forum.cloudron.io/post/86643https://forum.cloudron.io/post/86643Tue, 09 Apr 2024 07:42:42 GMT<![CDATA[Reply to question about SAML authentication on Tue, 26 Mar 2024 02:28:23 GMT]]>@adisonverlice2 It's not in the official app store, but it was packaged for Cloudron by a user here: https://github.com/njsubedi/cloudron-keycloak

It sounds like you could also use a private repository for that image if you want to have a more managed pipeline for updates.

This was the thread where it was discussed in depth: https://forum.cloudron.io/topic/6310/keycloak-cloudron/92

]]>https://forum.cloudron.io/post/85728https://forum.cloudron.io/post/85728Tue, 26 Mar 2024 02:28:23 GMT<![CDATA[Reply to question about SAML authentication on Mon, 25 Mar 2024 23:37:55 GMT]]>@brerlapn I don't know if my message came through, but in case I didn't, I basically asked if keycloak was a cloudron application? if not, how can I get it using cloudron?

]]>https://forum.cloudron.io/post/85726https://forum.cloudron.io/post/85726Mon, 25 Mar 2024 23:37:55 GMT<![CDATA[Reply to question about SAML authentication on Sat, 23 Mar 2024 08:24:35 GMT]]>@brerlapn heard of it, but is it a cloudron app? if so, I think it needs to be

]]>https://forum.cloudron.io/post/85590https://forum.cloudron.io/post/85590Sat, 23 Mar 2024 08:24:35 GMT<![CDATA[Reply to question about SAML authentication on Tue, 19 Mar 2024 00:42:17 GMT]]>@adisonverlice2 Have you checked out Keycloak? I've seen someone here say that they've successfully packaged it for Cloudron. It's open source and can serve as an IDP. It also supports SAML (as well as OAuth 2.0 and OIDC). It may have a bit of a learning curve to set up, but it's well-regarded, has an active community, and is actively supported. Also looks like it supports Duo.

]]>https://forum.cloudron.io/post/85218https://forum.cloudron.io/post/85218Tue, 19 Mar 2024 00:42:17 GMT<![CDATA[Reply to question about SAML authentication on Thu, 14 Mar 2024 21:51:38 GMT]]>wait someone upvoted my post?

]]>https://forum.cloudron.io/post/85100https://forum.cloudron.io/post/85100Thu, 14 Mar 2024 21:51:38 GMT<![CDATA[Reply to question about SAML authentication on Thu, 14 Mar 2024 10:39:04 GMT]]>@nebulon I see...

]]>https://forum.cloudron.io/post/85032https://forum.cloudron.io/post/85032Thu, 14 Mar 2024 10:39:04 GMT<![CDATA[Reply to question about SAML authentication on Thu, 14 Mar 2024 09:58:28 GMT]]>I moved this to our feature request forum category, since this would be a new feature to implement.

For the other aspect, I am not that familiar with duo. Cloudron currently only support external auth or identity provider, which also support LDAP or ActiveDirectory.

]]>https://forum.cloudron.io/post/85027https://forum.cloudron.io/post/85027Thu, 14 Mar 2024 09:58:28 GMT<![CDATA[Reply to question about SAML authentication on Thu, 14 Mar 2024 09:42:05 GMT]]>@nebulon 1. wait how did this post get moved and to what category? and2. I see. our SSO provider, duo, wants our SAML credentials, and wants an IDP. because of financial strains, we cannot get an IDP like Google workspace, or entra ID, etc.
I've been looking for a free 1, but cannot find any good 1's, that's why I was wondering. duo also has active directory, but it needs the duo proxy service installed, and I don't know if it'll support LDAP or whatever it uses...

]]>https://forum.cloudron.io/post/85026https://forum.cloudron.io/post/85026Thu, 14 Mar 2024 09:42:05 GMT<![CDATA[Reply to question about SAML authentication on Thu, 14 Mar 2024 07:23:45 GMT]]>Cloudron does not implement a SAML IdentityProvider and there are no immediate plans to do so. I think you are the first one asking for this and the authentication system on Cloudron is more tailored to serve the installed apps, where so far LDAP and OpenID are the main supported systems.

I will move this to the feature request forum section though.

]]>https://forum.cloudron.io/post/85016https://forum.cloudron.io/post/85016Thu, 14 Mar 2024 07:23:45 GMT