SAML2 Integration for login

[lusu007]

Describe the solution you'd like
We need SAML2 integration for integrating this webapp with our current infrastructure.

[DevSpork]

Hey, out of interest and because it wasn't assigned yet I tried to implement this feature here. It's still in an early state, there is very little documentation, it's probably against your style guides and it's only tested with Keycloak so no idea if this works with other IDPs. Nevertheless, whilst working on this, I stumbled across a little problem. In (at least my SAML provider) there is no numeric userid which leads to errors when querying for schematics and highmaps. To work around this a rather simple but ugly fix would be to md5 hash the username and interpret that hash as hex number. But there are several issues with this (username change?). But I don't want to fiddle with the db schema so what is your suggestion?

[J3SKO]

Nice that you want to handle this issue :)

General

• SAML2 should be implement as an additional strategy
• The preferred strategy should be set by environment variable (default: local)

Database

• Each strategy should have its separate table
• The ID should act as a table index, so it does not have to be provided by the strategy
• Identification via email and so on by the strategy

Views / APIs

All pages / APIs that are no longer needed should be disabled (e.g. /pw-reset or /management/users)

If you have further questions, don't hesitate.