Menu

iTop 3.1.1 SAML Authentication

2024-05-23
2024-06-11
  • Tristan Desrosiers

    Hello, I've been trying to integrate saml authentication in my itop instance but I keep having the same issues with the redirect after logging in. It sends me towards https://my-itop/env-production/combodo-saml/acs.php, which contains deprecated and warning messages. After reloading https://my-itop/ it then logs me in legitimatly and sends me to https://my-itop/pages/UI.php which is where I'd like to be sent to after the first login. Any ideas as to how to fix this?

    After the first login we see:

    Login Response Ok
    Using nameId as the 'login', the value is 'username@gmail.com'
    Redirecting to: https://my-itop/pages/UI.php

    and only after the second login (https://my-itop/) we see:

    Successfully logged in (user = 'username@gmail.com')

    The Reply URL microsoft side is set as: https://my-itop/pages/UI.php

     
  • Jeffrey Bostoen

    Jeffrey Bostoen - 2024-05-23

    Which versions are you currently using? Version of PHP, iTop and the SAML extension?
    What is the order of the "allowed_login_types" configuration parameter?

     
  • Tristan Desrosiers

    I am using itop version 3.1.1 (comes with php version 8.1.27). docker-compose.yml from supervisions/itop (https://hub.docker.com/r/supervisions/itop/)

    SSO SAML authentication 1.1.4

    allowed_login_types => 'saml|form|external|basic'

    Thanks

     
  • Jeffrey Bostoen

    Jeffrey Bostoen - 2024-06-04

    Hm, I guess it has to do with your PHP version; although I thought 8.1 was supported for the extension as well as iTop 3.1. Can you confirm your PHP version from iTop's "about" dialog (profile icon > About iTop > at the bottom: click "support information")

     

    Last edit: Jeffrey Bostoen 2024-06-12
  • Tristan Desrosiers

    Yeah here it is:

    ===== begin =====
    iTopVersion: 3.1.1-1
    iTopBuild: 12561
    iTopBuildDate: 2023-12-19 10:53:23
    MySQLVersion: 11.1.2-MariaDB-1:11.1.2+maria~ubu2204
    PHPVersion: 8.1.27
    OSVersion: Linux
    WebServerVersion: Apache/2.4.57 (Debian)
    PHPModules: Core, date, libxml, openssl, pcre, sqlite3, zlib, ctype, curl, dom, fileinfo, filter, ftp, hash, iconv, json, mbstring, SPL, session, PDO, pdo_sqlite, standard, posix, Reflection, Phar, SimpleXML, tokenizer, xml, xmlreader, xmlwriter, mysqlnd, apache2handler, apcu, gd, ldap, mcrypt, mysqli, soap, sodium, zip
    ItopSetting/cron_max_execution_time: 600
    ItopSetting/timezone: Europe/Paris
    PHPSetting/memory_limit: 256M
    PHPSetting/max_execution_time: 30
    PHPSetting/upload_max_filesize: 2M
    PHPSetting/post_max_size: 8M
    MySQLSetting/max_allowed_packet: 16777216
    MySQLSetting/key_buffer_size: 134217728
    MySQLSetting/query_cache_size: 1048576
    MySQLStatus/Key_read_requests: 0
    MySQLStatus/Key_reads: 0
    InstallDate: 2024-06-11 19:14:14
    InstallPath: /var/www/html/
    ---- Installation choices ----
    ...
    InstalledExtension/combodo-saml/1.1.4 (Extension)
    ---- Actual modules installed ----
    ...
    InstalledModule/combodo-db-tools: 3.1.1
    ...
    InstalledModule/combodo-saml: 1.1.4
    InstalledModule/combodo-webhook-integration: 1.3.2
    ...
    ===== end =====

     

Log in to post a comment.

Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.