Inedo Community Forums Forums
    • Recent
    • Tags
    • Popular
    • Login

    Welcome to the Inedo Forums! Check out the Forums Guide for help getting started.

    If you are experiencing any issues with the forum software, please visit the Contact Form on our website and let us know!

    Support for hybrid SAML and Local User Authentication

    Scheduled Pinned Locked Moved Support
    9 Posts 4 Posters 29 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J Offline
      jblaine_9526
      last edited by

      Hi,
      I'm looking into setting up SAML authentication as a primary means of login to Proget, however when I am connecting programmatically to the API I still need to be able to connect with local user authentication because I'm not able to use API keys and this fails.
      Is there any plans to allow a hybrid SAML and local auth database?

      atrippA 1 Reply Last reply Reply Quote 0
      • atrippA Offline
        atripp inedo-engineer @jblaine_9526
        last edited by

        Hi @jblaine_9526 , there are!

        I don't have a schedule just yet, but we are planning to simplify the "hybrid" user directory by just making it so that you can set an "active/inactive" flag on each user directory, and then ProGet will run through the active ones in a prioirty order.

        Cheers,
        Alana

        J 1 Reply Last reply Reply Quote 0
        • J Offline
          jblaine_9526 @atripp
          last edited by

          @atripp Just as a clarification, this would allow both SAML SSO, and local user authentication?
          Currently with SAML enabled, there is no way to bypass the SAML authentication on login. Would this enable an option to bypass the SAML authentication in order to log into the server?

          atrippA 1 Reply Last reply Reply Quote 0
          • atrippA Offline
            atripp inedo-engineer @jblaine_9526
            last edited by

            @jblaine_9526 good question; it's not exactly spec'd out, but that would make sense. If SAML is enabled (as one of the directories), then users should be able to bypass SAML behavior. Maybe two Login Buttons, or something.

            Since SAML is a ProGet Enterprise feature, it's very possible we could implement this specific requirement much sooner as part of a different program (i.e. "customer success" vs "product roadmapping"), but neither is really my department 😓

            I can get you in touch with my colleague who's on that team, but he's not on the forums -- let me know if it's okay to share your email to him (I can see it from my end)

            J 1 Reply Last reply Reply Quote 0
            • J Offline
              jblaine_9526 @atripp
              last edited by

              @atripp Sounds good to me I have no problem with you sharing my email.
              In the meantime I've updated our tooling to use solely APIKeys with SAML enabled in order to get what I need for my current POC testing.

              atrippA 1 Reply Last reply Reply Quote 0
              • atrippA Offline
                atripp inedo-engineer @jblaine_9526
                last edited by

                @jblaine_9526 sounds good, I've forwarded this to our presales / customer success team internally - so they'll probably reach-out in the coming days about that process to see how they can help

                1 Reply Last reply Reply Quote 0
                • S Offline
                  scusson_9923
                  last edited by

                  Hi,
                  We are looking to enable SAML in the near future and wondering where this issue stands? We need to keep our apikey access unchanged and allow for local logins.

                  Thanks,
                  Scott

                  stevedennisS 1 Reply Last reply Reply Quote 0
                  • stevedennisS Offline
                    stevedennis inedo-engineer @scusson_9923
                    last edited by

                    Hi @scusson_9923, this was implemented in ProGet 2022 :)

                    1 Reply Last reply Reply Quote 0
                    • S Offline
                      scusson_9923
                      last edited by

                      Good news! Thanks!

                      1 Reply Last reply Reply Quote 0

                      Hello! It looks like you're interested in this conversation, but you don't have an account yet.

                      Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

                      With your input, this post could be even better 💗

                      Register Login
                      • 1 / 1
                      • First post
                        Last post
                      Inedo Website Home • Support Home • Code of Conduct • Forums Guide • Documentation