Feature Request: SAML login for Standalone Wekan

Brought to you by: wekan

#708 Feature Request: SAML login for Standalone Wekan

Milestone: Paid Feature

Status: open

Owner: nobody

Labels: Feature (138) Feature:User-accounts:SAML (1)

Updated: 2026-06-20

Created: 2016-10-12

Creator: Anonymous

Private: No

Originally created by: Gobliins
Originally owned by: xet7

Hello,

i want to add a saml login next to the existing login by including this https://github.com/steffow/meteor-accounts-saml lib.
In my old project i put the {{samllogin}} analog to {{loginbuttons}} on my main html page.
However i am totally confused where to include the login here at all.

i added the template and helper file in the layout.jade, layout.js but the reference where the tempalte is included is missing.

Can someone help me here?

Discussion

Anonymous - 2017-05-08

Originally posted by: xet7

This issue is for SAML on Docker/source install.

On https://sandstorm.io platform, SAML is already available, screenshots at:
https://discourse.wekan.io/t/sso-passing-variables-through-url/493/4

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Anonymous - 2018-01-08

Originally posted by: gerbsen

hey there, I don‘t really understand the wiki entry and this issue here, so I better ask again, could you guys tell me the current status of the SAML integration? It’s available for sandstorm but not in the open source version? Is there a way to bring/buy this to be open source? Am I missing something? Thanks, Daniel

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Anonymous - 2018-01-08

Originally posted by: xet7

@gerbsen

All of Sandstorm is Open Source, including SAML integration. I have tested it, and it works.
https://sandstorm.io/news/2017-02-06-sandstorm-returning-to-community-roots

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Anonymous - 2018-01-08

Originally posted by: xet7

@gerbsen

Currently only way to support Sandstorm financially is to upgrade to paid account at https://sandstorm.io cloud service, it's highly recommended even if you don't use it, just to keep it running, as Sandstorm developers keep updating it at their free time on weekends.

Supporting Wekan is detailed at https://wekan.team

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Anonymous - 2018-12-07

Originally posted by: xet7

@danpatdav

Yes, adding some SAML package to Wekan would make SAML login possible:

https://atmospherejs.com/?q=saml

https://guide.meteor.com/accounts.html

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Anonymous - 2019-09-11

Originally posted by: peterk

SAML support would unlock Wekan for use in a lot of organizations. We checked the Sandstorm version but it does not work for end users (they find the extra menus confusing). Is anyone already working on adding SAML in Wekan?

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Anonymous - 2019-11-06

Originally posted by: xet7

I will start implementing SAML for Standalone Wekan at about 2020-02-02, it's at my Roadmap Commercial Support list.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Anonymous - 2019-11-06

assigned_to: xet7
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Anonymous - 2021-01-21

Originally posted by: Vinc89

Hello,
just want to give some feedback to the SAML feature.
I set the environment variables in the docker-compose file. Using the quay.io/wekan/wekan:latest image.
SAML_ENABLED=true
SAML_PROVIDER=openam
SAML_ENTRYPOINT=https://ourdomain.com
SAML_ISSUER=https://ourdomain.com
SAML_CERT=MIIG9DCCBd.*
SAML_IDPSLO_REDIRECTURL=https://ourdomain.com
SAML_PRIVATE_KEYFILE=/build/saml-credendials/sp-cert.pem
SAML_PUBLIC_CERTFILE=/build/saml-credendials/sp-key.pem
SAML_IDENTIFIER_FORMAT=urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified
SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE=mail
SAML_ATTRIBUTES=[uid, sn, givenName, mail]

No SAML login button is available. Am I maybe missing some other settings? Thanks in advance!

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Anonymous - 2021-04-08

Originally posted by: xet7

Are browsers going to break SAML and other login systems?
https://news.ycombinator.com/item?id=26728596

I'm just thinking, what login system is worth implementing at all, is it just going to break.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Anonymous - 2021-10-07

Originally posted by: mistial-dev

Are browsers going to break SAML and other login systems? https://news.ycombinator.com/item?id=26728596

I'm just thinking, what login system is worth implementing at all, is it just going to break.

Bearer tokens with redirect work and will continue to work fine. It likely means that your login will have to be done in a popup or an IFRAME, as well as back channel communication (identity provider to service provider directly) if you want to keep a single page application.

SAML isn't broken.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Anonymous - 2022-05-03

Originally posted by: derhelge

Hi @xet7,

any news on this? we paid on implementing SAML/Shibboleth-Authentication.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Anonymous - 2022-05-03

Originally posted by: xet7

@derhelge

I need some more details:

With SAML/Shibboleth-Authentication, do you mean they are some same thing, or different?

Do you mean SAML similar like in RocketChat ?

Or do you mean SAML similar like in https://sandstorm.io ?

Or do you mean SAML/Shibboleth-Authentication similar like in some other software?

If you mean Shibboleth-Authentication, is there example https://npmjs.com or https://atmospherejs.com package that is compatible with your Identity Provider?

What Identity Provider you use, so that I can test compatibility?
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Anonymous - 2022-05-03

Originally posted by: xet7

In SAML/Shibboleth-Authentication, is there need to map some Organizations/Teams/People structure to corresponding WeKan Organizations/Teams/People structure? Can you send example anonymized example query result about structure to support@wekan.team ?
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Log in to post a comment.