You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Pål Hjelmeseth Myklebust <p....@usit.uio.no> on 2023/08/24 11:05:45 UTC

SAML question

Hello, I am trying to configure the SAML extension. Is there a way to download/view the SP metadata (preferably in a xml format)?

Thank,

Pål



---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org


Notification to a user before he has been logged out

Posted by Gabriel Huerta Araujo <hu...@globalhitss.com.INVALID>.
Hi all

I made a change to select one or more users and logout their access in the guacamole. Any idea on how to implement when before the user  has been removed from guacamole, display a window to his guacamole session indicating the above?

-Gabriel

Re: SAML question

Posted by Michael Jumper <mj...@apache.org>.
No, Guacamole uses the "NameID" attribute for the username - the 
standard attribute used within SAML to represent the identity of the 
user. It does not use a session UUID, though it's possible that your IdP 
may have been inadvertently configured to send such a UUID as the username.

- Mike

On 8/24/2023 10:32 PM, Pål Hjelmeseth Myklebust wrote:
> Ok. What attributes does the SAML extension expect in return from the IdP? It looks like it's using the temporary session uuid as username witch results in a new user for each try. Is there support for specifying the attribute names?
> 
> -
> Pål
> 
> -----Original Message-----
> From: Nick Couchman <vn...@apache.org>
> Sent: Thursday, August 24, 2023 3:44 PM
> To: user@guacamole.apache.org
> Subject: Re: SAML question
> 
> On Thu, Aug 24, 2023 at 7:05 AM Pål Hjelmeseth Myklebust <p....@usit.uio.no> wrote:
>>
>> Hello, I am trying to configure the SAML extension. Is there a way to download/view the SP metadata (preferably in a xml format)?
> 
> No, we currently do not have a way to generate the SP metadata.
> 
> -Nick
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
> For additional commands, e-mail: user-help@guacamole.apache.org
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
> For additional commands, e-mail: user-help@guacamole.apache.org

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org


RE: SAML question

Posted by Pål Hjelmeseth Myklebust <p....@usit.uio.no>.
Ok. What attributes does the SAML extension expect in return from the IdP? It looks like it's using the temporary session uuid as username witch results in a new user for each try. Is there support for specifying the attribute names?

-
Pål

-----Original Message-----
From: Nick Couchman <vn...@apache.org> 
Sent: Thursday, August 24, 2023 3:44 PM
To: user@guacamole.apache.org
Subject: Re: SAML question

On Thu, Aug 24, 2023 at 7:05 AM Pål Hjelmeseth Myklebust <p....@usit.uio.no> wrote:
>
> Hello, I am trying to configure the SAML extension. Is there a way to download/view the SP metadata (preferably in a xml format)?

No, we currently do not have a way to generate the SP metadata.

-Nick

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org

Re: SAML question

Posted by Nick Couchman <vn...@apache.org>.
On Thu, Aug 24, 2023 at 7:05 AM Pål Hjelmeseth Myklebust
<p....@usit.uio.no> wrote:
>
> Hello, I am trying to configure the SAML extension. Is there a way to download/view the SP metadata (preferably in a xml format)?

No, we currently do not have a way to generate the SP metadata.

-Nick

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org