16

I'm aware of and have successfully used the AD module for numerous Sitecore implementations but I have a requirement to support SAML so that a non-AD based authentication provider can be used. Does Sitecore support SAML? If not, are there modules that would allow me to connect to various SSO providers?

  • I found this blog post from John West that lists all of the options but it is from 2011: community.sitecore.net/technical_blogs/b/sitecorejohn_blog/… – sestocker Dec 17 '16 at 4:44
  • Sitecore builds on top of the standard ASP.NET security platform. If you can find a SAML provider for ASP.NET then you should be able to use that transparently to Sitecore. Most SAML provider I looked at did require a small amount of integration work though. – Richard Hauer Dec 17 '16 at 20:47
15

This will be natively supported in Sitecore 9.0, according to the public roadmaps. For now a solution might be to use this module: https://github.com/BasLijten/SitecoreFederatedLogin

See my blog on how to achieve this with Sitecore 9.0: https://blog.baslijten.com/enable-federated-authentication-and-configure-auth0-as-an-identity-provider-in-sitecore-9-0/

I explained completely how this works in my blogpost on federated authentication for Sitecore 8.x: https://blog.baslijten.com/how-to-add-federated-authentication-with-sitecore-and-owin/

  • I've read through that blog post but I'm stuck in an infinite loop where the ADFS server successfully authenticates me and sends me back, but the [Authorize] attribute prevents me from logging in (IsAuthenticated = false) and sends me back to ADFS (rinse, repeat). – tjans Mar 15 '18 at 13:54
10

It might. There is a company claiming to have an option for it, but there is no direct download link and no way to easily verify the claim.

That said; you might be better off, going through something like Gigya. Not only will you get SAML, but Gigya opens up for a host of other authentication modes and options. And there is a tested and supported Gigya module for Sitecore. This also satisfies your requirement for a module that allows you to connect to various SSO providers.

I am not too familiar with the specifics of SAML myself, but here is the main entry point to Gigya/SAML documentation to give you an overview.

  • Thanks Mark, I didn't know about ssoeasy.com - going to take a look at it. – Bas Lijten Dec 19 '16 at 7:25
7

1) Sitecore 9+ natively supports SAML through Federated Authentication. You have to configure it and write your own provider. These links will guide you through this process for Sitecore 9:

2) Sitecore before version 9. Use solution provided in answers by @Bas Lijten or @Mark Cassidy.

Explore also usage of https://www.shibboleth.net/ as your Claims SAML provider in this scenario. Take a look on this article to troubleshoot some known issues here -> http://jockstothecore.com/federated-authentication-with-shibboleth-2/

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.