verify login+password in Perl via SAML

schludi has asked for the wisdom of the Perl Monks concerning the following question:

Is there a possibility to verify login+password in Perl via SAML at an Identity Provider (IdP)? If yes: how?

I am aware that this is not the usual way for SAML to work.

The background to this is that we have 4 different clients for our web application, which is supposed to enable a central password via SAML, which are implemented in completely different technologies.

Our product manager has decided that a SAML connection is too complex for the 4 clients and that authentication should therefore take place centrally in the web application.

The clients transfer login and password to the web application, just like without SSO, and the web application is supposed to verify the access data centrally.

Comment on verify login+password in Perl via SAML

Replies are listed 'Best First'.
Re: verify login+password in Perl via SAML by holli (Abbot) on Jun 25, 2019 at 17:26 UTC
Plack::Auth::SSO, Jifty::Plugin::Authentication::ModShibb Keyword: Shibboleth (Shibboleth Consortium) holli You can lead your users to water, but alas, you cannot drown them.	[reply]
Re: verify login+password in Perl via SAML by choroba (Cardinal) on Jun 25, 2019 at 14:31 UTC
Crossposted to Reddit. It's considered polite to inform about crossposting, as there are many hackers not attending both the sites; by adding a link to the other one, you save them from unnecessary work should one of the sites have an answer. `map{substr$_->[0],$_->[1]\|\|0,1}[\\|\|{},3],[[]],[ref qr-1,-,-1],[{}],[sub{}^ARGV,3]`	[reply] [d/l]