HTTP authentication (SAML Single Sign On)

[remko]

In our company SAML is the standard for authentication.

If possible, I would like to add SAML authentication to Proxmox

• indirect using HTTP authentication on Apache
• 'native' solution

Advantages of SAML authentication

• cloud based identity provider
• single sign on
• on premise LDAP not required

At the moment we are using LDAP authentication.
Disadvantage of LDAP authentication: on premise LDAP

 

[nvoutsin]

I second it.
Is there anything in the works? Otherwise, have you explored any other option to achieve the same results with an indirect method e.g. using an http proxy?

 

[fabian]

feel free to implement and contribute a SAML authentication plugin for pve-access-control

see https://pve.proxmox.com/wiki/Developer_Documentation and https://git.proxmox.com/?p=pve-acce...ea9af93aafabf2bd468fe97d8d56743a1f8ed;hb=HEAD

 

[fireon]

2 years later, are there news? We are also interessed about SAML SSO

 

[fabian]

2 years later, are there news? We are also interessed about SAML SSO

no news - maybe file an issue on bugzilla?

 

[fireon]

Already there since 2017, i've the version to 6.0 https://bugzilla.proxmox.com/show_bug.cgi?id=1583

 

[Glowsome]

Either a SAML option or OpenID-Connect would be what i would be looking for

 

[rule88]

I would love to see something like SAML or OIDC. If needed I would be available to help testing.

 

[fireon]

It's now in: https://pve.proxmox.com/pve-docs/chapter-pveum.html#pveum_openid