simplesamlphp / simplesamlphp-module-adfs
A module that implements the WS-federation IDP
Installs: 5 696 461
Dependents: 4
Suggesters: 0
Security: 0
Stars: 5
Watchers: 6
Forks: 5
Open Issues: 0
Type:simplesamlphp-module
Requires
- php: ^8.1
- ext-dom: *
- beste/clock: ^3.0
- psr/clock: ^1.0
- simplesamlphp/assert: ^1.1
- simplesamlphp/saml11: ^1.0
- simplesamlphp/saml2: ^5@dev
- simplesamlphp/simplesamlphp: ^2.4
- simplesamlphp/ws-security: ^1.6
- simplesamlphp/xml-common: ^1.16
- simplesamlphp/xml-security: ^1.9
- symfony/http-foundation: ^6.4
Requires (Dev)
- dev-master / 3.0.x-dev
- v3.0.0-rc1
- v2.1.7
- v2.1.6
- v2.1.5
- v2.1.4
- v2.1.3
- v2.1.2
- v2.1.1
- v2.1.0
- v2.0.3
- v2.0.2
- v2.0.1
- v2.0.0
- v2.0.0-rc6
- v2.0.0-rc5
- v2.0.0-rc4
- v2.0.0-rc3
- v2.0.0-rc2
- v2.0.0-rc1
- v2.0.0-beta.1
- v1.0.9
- v1.0.8
- v1.0.7
- v1.0.6
- v1.0.5
- v1.0.4
- v1.0.3
- v1.0.2
- v1.0.1
- v1.0.0
- v0.9.10
- v0.9.9
- v0.9.8
- v0.9.7
- v0.9.6
- v0.9.5
- v0.9.4
- v0.9.3
- v0.9.2
- v0.9.1
- v0.9.0
- dev-dependabot/github_actions/all-actions-d109cd9e8b
- dev-feature/metadata-exchange
- dev-release-3.0
- dev-release-2.1
- dev-release-2.0
- dev-release-1.0
- dev-release-0.9
This package is auto-updated.
Last update: 2024-11-19 10:08:56 UTC
README
Install
Install with composer
vendor/bin/composer require simplesamlphp/simplesamlphp-module-adfs
Configuration
Next thing you need to do is to enable the module: in
config.php
, search for the module.enable
key and set adfs
to true:
'module.enable' => [ 'adfs' => true, … ],
View samples in metadata-templates
for defining your idp and any relying
parties/sps.
Tips for admins new to WS-Fed
-
A
realm
is similar to an entityId from SAML.adfs-sp-remote.php
metadata array is based onrealm
. An IP STS is similar to an IdP. -
Some WS-Fed Relying Party applications want the assertion lifetime to be longer than the application's session lifetime. If not, the application will send the user to the IdP to login again, hoping for a longer lived assertion. SSP's default assertion lifetime is 5 minutes while SharePoint, by default, wants 10 minutes. Use the
assertion.lifetime
inadfs-sp-remote.php
to set the time greater than that set in SharePoint (which can be configured by adjustingLogonTokenCacheExpirationWindow
)