SAML Jackson bridges or proxies a SAML login flow to OAuth 2.0 or OpenID Connect, abstracting away all the complexities of the SAML protocol. It also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.
We now also support OpenID Connect providers.
SAML Jackson also supports Directory Sync based on the SCIM 2.0 protocol.
Directory sync helps organizations automate the provisioning and de-provisioning of their users. As a result, it streamlines the user lifecycle management process by saving valuable organizational hours, creating a single truth source of the user identity data, and facilitating them to keep the data secure.
For complete documentation, visitboxyhq /docs/directory-sync/overview
If you find this project helpful, please consider supporting us by starringthe repositoryand sharing it with others. This helps others find the project, grow the community and ensure the long-term health of the project. 🙏
- SAML Jackson: Open Source Enterprise SSO And Directory Sync
There are two ways to integrate SAML Jackson into an application. Depending on your use case, you can choose either of them.
- As a separate service(Next.jsapplication) This includes an admin portal out of the box for managing SSO and Directory Sync connections.
- NPM libraryas an embedded library in your application.
- Try our hosted demo showcasing the SAML service provider (SP) initiatedlogin flow here,which uses ourMock SAMLIdP service.
- Try an Identity Provider (IdP) initiatedlogin flow here.
Let's get you to Hello SAML Jackson in no time.
- Node.jsat version
18.14.2or higher
It is generally a good idea to install and maintain Node.js versions using a version manager likenvmornvson Windows. Moreinformation is available here.
git clone https://github /boxyhq/jackson.git
cdjacksonnpm iCreate a.envfrom the existing.env.examplefile in the root of the project.
cp.env.example.envEnvironment variable documentation:Have a look athttps://boxyhq /docs/jackson/deploy/env-variablesfor all of the available environment variables.
For the rest of the setup, we will use a PostgreSQL database. The easiest way to get PostgreSQL up and running on macOS is by using Postgres.app. You can download it fromhttps://postgresapp /.
For other operating systems and alternative options for MacOS, please see thedocumentation available on the Prisma website.
Now that we have our database running we can start the development server. But before we do, we need a way to log into the admin portal.
To log in to the admin portal we either need toconfigure magic links,orenable username and passwordlogin. The easiest one, and the one we will use, is to enable username and password login.
In your.envfind theNEXTAUTH_ADMIN_CREDENTIALSenvironment variable. We need to provide anemail:passwordcombination that we can then use to log in to the admin portal. For example:
NEXTAUTH_ADMIN_CREDENTIALS=admin@example:passwordNow we can start the development server:
npm run devOpenhttp://localhost:5225in your browser and you should be redirected to the login screen.
At the login screen, you can now use the username and password you set in theNEXTAUTH_ADMIN_CREDENTIALSenvironment variable to log in. Click "Sign In" and you should be logged in and see the SSO Connections page with no configured connections. We have reached Hello SAML Jackson!
For the full documentation, visitboxyhq /docs/jackson/overview
Deploy SAML Jackson to the cloud with a single click using the following providers:
- SSO/OIDC TutorialSAML Jackson Enterprise SSO(split into chapters to easily find what you are looking for)
- SAML single sign-on logindemo
Create a.env.test.localfile and populate the values. To execute the tests run:
npm run test:e2eBoxyHQ is on a mission to democratize enterprise readiness for developers one building block at a time. We are building a suite of security building blocks that are easy to use and integrate into your applications. Our goal is to make being enterprise-ready accessible to all developers, founders, and those responsible for the security of their internal applications regardless of their security expertise.
Community is core to our mission. We are building a community of developers, security enthusiasts, and founders who are passionate about security and building secure applications. We are building in the open and would love for you to join us on this journey.
Join the community on Discord today.
We support first-class observability on the back of OpenTelemetry, referherefor more details.
We support SBOM reports, referherefor more details.
We support container image verification using cosign, referherefor more details.
Thank you for your interest in contributing to SAML Jackson! We are excited to welcome contributions from the community. Please refer to ourcontributing guidelinesfor more information.
Reach out to the maintainers at one of the following places:
![@dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=64&v=4){kind=small}
