topic admin auth in General Topics

admin auth

jchitsaz — Wed, 31 May 2017 21:52:19 GMT

Any plans to allow various external authentication support (AD, SAML, etc)?

Re: admin auth

lmori — Fri, 02 Jun 2017 12:25:31 GMT

Hi @jchitsaz,

we have plans for SAML (https://github.com/PaloAltoNetworks/minemeld-core/issues/166), would that work ?

Re: admin auth

chirss — Fri, 02 Jun 2017 14:47:51 GMT

LDAP auth (primarily msft) would be ideal along with SAML. I'd like to be able to restrict access to a group or groups within LDAP which SAML doesn't provide.

Re: admin auth

Hugh.Kelley — Wed, 23 Jan 2019 12:56:10 GMT

SAML would be ideal for us. Is there any early code we can test and/or contribute to?

Re: admin auth

lmori — Wed, 23 Jan 2019 13:05:55 GMT

Hi @Hugh.Kelley,

nope, but you can look into minemeld/flask/aaa*.py files to check the current mechanism. Why SAML?

Re: admin auth

Hugh.Kelley — Thu, 24 Jan 2019 13:34:56 GMT

SAML is best for me because we have the supporting infrastructure already in place. Our SaaS apps still seem to use SAML more than other protocols like OIDC.

Thanks for the pointer about the /flask files. I'm new to Flask but am thinking that a file like this (link below) could drop into MineMeld pretty easily and sit alongside the /login route (it uses /loginsso).

flask/loginsso.py # Full transparency - I have not tested this at all, just a mock up

I'll try to test some over the coming days.