EU Public Code

Satosa-Saml2Spid

A proxy that allows legacy Saml2 service providers to communicate with Spid Identity Providers

    identity-management
Last release
2021-01-25 (0.2.0)
Technical contact
Giuseppe De Marco
Type of maintenance
internal
License
Apache-2.0
Platforms
linux
web
List of dependencies
OSS Python

Official website

Documentation

Source code

Roadmap

Main audience

Supported languages

Satosa-Saml2 Spid is an intermediary between many SAML2 Service Providers and many SAML2 Identity Providers. Specifically it allows traditional Saml2 Service Providers to communicate with Spid Identity Providers adapting Metadata and AuthnRequest operations to the Spid technical requirements. This solution allows us to adopt multiple proxy frontends and backends to adapt and allows to communicate systems that, due to protocol or specific limitations, traditionally could not interact each other.

Short glossary:

  • Frontend, interface of the proxy that is configured as a SAML2 Identity Provider
  • Backend, interface of the proxy that is configured as a SAML2 Service Provider
  • TargetRouting, a SATOSA microservice for selecting the output backend to reach the endpoint (IdP) selected by the user
  • Discovery Service, interface that allows users to select the authentication endpoint

Features

  • Saml2 IdP
  • Saml2 SP
  • Saml2 proxy to SPID Saml
  • compliant to spid-saml-check validations
  • Customizable with additional backends, frontends and microservices