You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cloudstack.apache.org by "kiranchavala (via GitHub)" <gi...@apache.org> on 2025/06/30 07:06:17 UTC
[D] How to configure Multiple IDP's for Cloudstack SSO ( Saml authentication) [cloudstack]
GitHub user kiranchavala created a discussion: How to configure Multiple IDP's for Cloudstack SSO ( Saml authentication)
HI all
Suppose I have multiple identity providers (Azure, Okta, ADFS) that I want to integrate with Cloudstack
Tried the following steps
1. Navigate to Global settings >
saml2.default.idpid= http://app.azure.com,http://app.okta.com,
saml2.idp.metadata.url= http://azure/saml2/idp/metadata.php,http://okta/saml2/idp/metadata.php
2. Restart the management service
3. The UI doesn't list the Multiple IDP ( the single sign on is disabled ) and the output of the API is empty
https://cloudstack.apache.org/api/apidocs-4.20/apis/listIdps.html
GitHub link: https://github.com/apache/cloudstack/discussions/11105
----
This is an automatically sent email for users@cloudstack.apache.org.
To unsubscribe, please send an email to: users-unsubscribe@cloudstack.apache.org
Re: [D] How to configure Multiple IDP's for Cloudstack SSO ( Saml authentication) [cloudstack]
Posted by "rohityadavcloud (via GitHub)" <gi...@apache.org>.
GitHub user rohityadavcloud edited a comment on the discussion: How to configure Multiple IDP's for Cloudstack SSO ( Saml authentication)
@kiranchavala the IDP metadata can have multiple IDPs defined, for example back in the days USP/RNP had CAFe that gave an IDP metadata with multiple IDP services/servers defined
https://memoria.rnp.br/en/services/howcafeworks.html - I don't know if the I could find an example for you, but see https://ds.cafe.rnp.br/metadata/cafe-metadata.xml
GitHub link: https://github.com/apache/cloudstack/discussions/11105#discussioncomment-13614691
----
This is an automatically sent email for users@cloudstack.apache.org.
To unsubscribe, please send an email to: users-unsubscribe@cloudstack.apache.org
Re: [D] How to configure Multiple IDP's for Cloudstack SSO ( Saml authentication) [cloudstack]
Posted by "rohityadavcloud (via GitHub)" <gi...@apache.org>.
GitHub user rohityadavcloud added a comment to the discussion: How to configure Multiple IDP's for Cloudstack SSO ( Saml authentication)
@kiranchavala the IDP metadata can have multiple IDPs defined, for example back in the days USP/RNP had CAFe that gave an IDP metadata with multiple IDP services/servers defined
https://memoria.rnp.br/en/services/howcafeworks.html - I don't know if the I could find an example for you.
GitHub link: https://github.com/apache/cloudstack/discussions/11105#discussioncomment-13614691
----
This is an automatically sent email for users@cloudstack.apache.org.
To unsubscribe, please send an email to: users-unsubscribe@cloudstack.apache.org
Re: [D] How to configure Multiple IDP's for Cloudstack SSO ( Saml authentication) [cloudstack]
Posted by "kiranchavala (via GitHub)" <gi...@apache.org>.
GitHub user kiranchavala edited a discussion: How to configure Multiple IDP's for Cloudstack SSO ( Saml authentication)
HI all
Suppose I have multiple identity providers (Azure, Okta, ADFS) that I want to integrate with Cloudstack
Tried the following steps on ACS 4.20.1 and 4.19.x
1. Navigate to Global settings >
saml2.default.idpid= http://app.azure.com,http://app.okta.com,
saml2.idp.metadata.url= http://azure/saml2/idp/metadata.php,http://okta/saml2/idp/metadata.php
2. Restart the management service
3. The UI doesn't list the Multiple IDP ( the single sign on is disabled ) and the output of the API is empty
https://cloudstack.apache.org/api/apidocs-4.20/apis/listIdps.html
Also when creating a account, the multiple IDP doesn't show in the drop down
GitHub link: https://github.com/apache/cloudstack/discussions/11105
----
This is an automatically sent email for users@cloudstack.apache.org.
To unsubscribe, please send an email to: users-unsubscribe@cloudstack.apache.org
Re: [D] How to configure Multiple IDP's for Cloudstack SSO ( Saml authentication) [cloudstack]
Posted by "kiranchavala (via GitHub)" <gi...@apache.org>.
GitHub user kiranchavala added a comment to the discussion: How to configure Multiple IDP's for Cloudstack SSO ( Saml authentication)
Thanks @rohityadavcloud
GitHub link: https://github.com/apache/cloudstack/discussions/11105#discussioncomment-13639796
----
This is an automatically sent email for users@cloudstack.apache.org.
To unsubscribe, please send an email to: users-unsubscribe@cloudstack.apache.org
Re: [D] How to configure Multiple IDP's for Cloudstack SSO ( Saml authentication) [cloudstack]
Posted by "kiranchavala (via GitHub)" <gi...@apache.org>.
GitHub user kiranchavala closed a discussion: How to configure Multiple IDP's for Cloudstack SSO ( Saml authentication)
HI all
Suppose I have multiple identity providers (Azure, Okta, ADFS) that I want to integrate with Cloudstack
Tried the following steps on ACS 4.20.1 and 4.19.x
1. Navigate to Global settings >
saml2.default.idpid= http://app.azure.com,http://app.okta.com,
saml2.idp.metadata.url= http://azure/saml2/idp/metadata.php,http://okta/saml2/idp/metadata.php
2. Restart the management service
3. The UI doesn't list the Multiple IDP ( the single sign on is disabled ) and the output of the API is empty
https://cloudstack.apache.org/api/apidocs-4.20/apis/listIdps.html
Also when creating a account, the multiple IDP doesn't show in the drop down
GitHub link: https://github.com/apache/cloudstack/discussions/11105
----
This is an automatically sent email for users@cloudstack.apache.org.
To unsubscribe, please send an email to: users-unsubscribe@cloudstack.apache.org
Re: [D] How to configure Multiple IDP's for Cloudstack SSO ( Saml authentication) [cloudstack]
Posted by "kiranchavala (via GitHub)" <gi...@apache.org>.
GitHub user kiranchavala added a comment to the discussion: How to configure Multiple IDP's for Cloudstack SSO ( Saml authentication)
Currently, there is no issue with Single IDP, the sso works fine
GitHub link: https://github.com/apache/cloudstack/discussions/11105#discussioncomment-13614470
----
This is an automatically sent email for users@cloudstack.apache.org.
To unsubscribe, please send an email to: users-unsubscribe@cloudstack.apache.org