Single sign on?

[koalillo]

So I’ve noticed that the SSO documentation was removed:

Remove unmaintained & outdated documentation

, which had this pending PR to explain how to configure it correctly:

fix saml/login location for Kerberos SSO

I have followed it and I can use FreeIPA’s kerberos to limit access, however there are two issues:

• After login, I get redirected to https://nextcloud.mydomain.net/nextcloud/index.php/apps/user_saml/saml/login?requesttoken=****&originalUrl= which tells me "User is already logged-in", but if I edit the URL I can go on to use Nextcloud correctly

• I get a second password prompt to access the WebDAV URL

Mobile and desktop apps work correctly.

This is Nextcloud 13. Is there a plan to restore the documentation and fix those issues?

[jelledj]

Have you been able to solve the "User is already logged-in" issue ?

User_saml does not seem to handle RelayState=https://cloud.example.nl:8006/ URL correctly? "User is already logged-in"

Hello everybody, My SAML portal creates URLs after being logged in, and they work fine for Rocket.Chat and mom_mellon apps but Nextcloud user_saml returns an “User is already logged-in” https://ipsilon03.example.nl/idp/saml2/SSO/Redirect?SPIdentifier=https://cloud.example.nl:8006/nextcloud/index.php/apps/user_saml/saml/metadata&RelayState=https://cloud.example.nl:8006/

[koalillo]

No, not really, I switched to LDAP authentication in the end.