mirror of
https://github.com/BookStackApp/BookStack.git
synced 2026-02-09 03:09:38 +03:00
SAML, not all Attributes from IDP #3365
Closed
opened 2026-02-05 06:30:00 +03:00 by OVERLORD
·
6 comments
No Branch/Tag Specified
development
further_theme_development
l10n_development
release
llm_only
vectors
v25-11
docker_env
drawio_rendering
user_permissions
ldap_host_failover
svg_image
prosemirror
captcha_example
fix/video-export
v25.12.3
v25.12.2
v25.12.1
v25.12
v25.11.6
v25.11.5
v25.11.4
v24.11.4
v25.11.3
v25.11.2
v25.11.1
v25.11
v25.07.3
v25.07.2
v25.07.1
v25.07
v25.05.2
v25.05.1
v25.05
v25.02.5
v25.02.4
v25.02.3
v25.02.2
v25.02.1
v25.02
v24.12.1
v24.12
v24.10.3
v24.10.2
v24.10.1
v24.10
v24.05.4
v24.05.3
v24.05.2
v24.05.1
v24.05
v24.02.3
v24.02.2
v24.02.1
v24.02
v23.12.3
v23.12.2
v23.12.1
v23.12
v23.10.4
v23.10.3
v23.10.2
v23.10.1
v23.10
v23.08.3
v23.08.2
v23.08.1
v23.08
v23.06.2
v23.06.1
v23.06
v23.05.2
v23.05.1
v23.05
v23.02.3
v23.02.2
v23.02.1
v23.02
v23.01.1
v23.01
v22.11.1
v22.11
v22.10.2
v22.10.1
v22.10
v22.09.1
v22.09
v22.07.3
v22.07.2
v22.07.1
v22.07
v22.06.2
v22.06.1
v22.06
v22.04.2
v22.04.1
v22.04
v22.03.1
v22.03
v22.02.3
v22.02.2
v22.02.1
v22.02
v21.12.5
v21.12.4
v21.12.3
v21.12.2
v21.12.1
v21.12
v21.11.3
v21.11.2
v21.11.1
v21.11
v21.10.3
v21.10.2
v21.10.1
v21.10
v21.08.6
v21.08.5
v21.08.4
v21.08.3
v21.08.2
v21.08.1
v21.08
v21.05.4
v21.05.3
v21.05.2
v21.05.1
v21.05
v21.04.6
v21.04.5
v21.04.4
v21.04.3
v21.04.2
v21.04.1
v21.04
v0.31.8
v0.31.7
v0.31.6
v0.31.5
v0.31.4
v0.31.3
v0.31.2
v0.31.1
v0.31.0
v0.30.7
v0.30.6
v0.30.5
v0.30.4
v0.30.3
v0.30.2
v0.30.1
v0.30.0
v0.29.3
v0.29.2
v0.29.1
v0.29.0
v0.28.3
v0.28.2
v0.28.1
v0.28.0
v0.27.5
v0.27.4
v0.27.3
v0.27.2
v0.27.1
v0.27
v0.26.4
v0.26.3
v0.26.2
v0.26.1
v0.26.0
v0.25.5
v0.25.4
v0.25.3
v0.25.2
v0.25.1
v0.25.0
v0.24.3
v0.24.2
v0.24.1
v0.24.0
v0.23.2
v0.23.1
v0.23.0
v0.22.0
v0.21.0
v0.20.3
v0.20.2
v0.20.1
v0.20.0
v0.19.0
v0.18.5
v0.18.4
v0.18.3
v0.18.2
v0.18.1
v0.18.0
v0.17.4
v0.17.3
v0.17.2
v0.17.1
v0.17.0
v0.16.3
v0.16.2
v0.16.1
v0.16.0
v0.15.3
v0.15.2
v0.15.1
v0.15.0
v0.14.3
v0.14.2
v0.14.1
v0.14.0
v0.13.1
v0.13.0
v0.12.2
v0.12.1
v0.12.0
v0.11.2
v0.11.1
v0.11.0
v0.10.0
v0.9.3
v0.9.2
v0.9.1
v0.9.0
v0.8.2
v0.8.1
v0.8.0
v0.7.6
v0.7.5
v0.7.4
v0.7.3
0.7.2
v.0.7.1
v0.7.0
v0.6.3
v0.6.2
v0.6.1
v0.6.0
v0.5.0
Labels
Clear labels
🎨 Design
📖 Docs Update
🐛 Bug
🐛 Bug
:cat2:🐈 Possible duplicate
💿 Database
☕ Open to discussion
💻 Front-End
🐕 Support
🚪 Authentication
🌍 Translations
🔌 API Task
🏭 Back-End
⛲ Upstream
🔨 Feature Request
🛠️ Enhancement
🛠️ Enhancement
🛠️ Enhancement
❤️ Happy feedback
🔒 Security
🔍 Pending Validation
💆 UX
📝 WYSIWYG Editor
🌔 Out of scope
🔩 API Request
:octocat: Admin/Meta
🖌️ View Customization
❓ Question
🚀 Priority
🛡️ Blocked
🚚 Export System
♿ A11y
🔧 Maintenance
> Markdown Editor
pull-request
Mirrored from GitHub Pull Request
No Label
🐛 Bug
Milestone
No items
No Milestone
Projects
Clear projects
No project
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: starred/BookStack#3365
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @kubuntu70 on GitHub (Nov 27, 2022).
Describe the Bug
My Environment is:
BookStack: v22.10
IDP Provider: ucs Univention
My Problem ist:
only der Attributes "id" and "groups" visible
Steps to Reproduce
1.) .env
AUTH_METHOD=saml2
AUTH_AUTO_INITIATE=false
SAML2_NAME=SSO
SAML2_EMAIL_ATTRIBUTE=email
SAML2_EXTERNAL_ID_ATTRIBUTE=id
SAML2_DISPLAY_NAME_ATTRIBUTES=MeinName
SAML2_IDP_ENTITYID=https://ucs*.at/simplesamlphp/saml2/idp/metadata.php
SAML2_AUTOLOAD_METADATA=true
APP_DEBUG=true
SAML2_DUMP_USER_DETAILS=true
SAML2_IDP_AUTHNCONTEXT=true
2.) ucs metadata.php
3.) Login
..ANMELDEN MIT SSO
4.) Debug (Firefox/Chrome)
Expected Behaviour
email not NULL
name not id
Screenshots or Additional Context
No response
Browser Details
Firefox 108
Exact BookStack Version
v22.10
PHP Version
7.4
Hosting Environment
centos8
@kubuntu70 commented on GitHub (Nov 27, 2022):
SAML Message decoder shows:
@ssddanbrown commented on GitHub (Nov 27, 2022):
Hi @kubuntu70,
I can't see any evidence of your SAML system providing the name or email in response to BookStack.
Are you sure the SAML system is configured to provide those attributes?
@kubuntu70 commented on GitHub (Nov 27, 2022):
Hi Dan,
in UCS i can configure:
Service provider identifier: https://bookstack.-org.at/saml2/metadata
Respond to this service provider URL after login: https://bookstack.-org.at/saml2/acs
Single logout URL for this service provider: https://bookstack.*-org.at/saml2/sls
Format of NameID attribute: urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
Name of the attribute that is used as NameID: email
Name of the organization for this service provider: Bookstack
and extended settings:
thats it.
dd576645c110.png)
The Attributes in LDAP are ok (with LDAP Login is all OK)
Maybe I'll have to talk to the people of Univention?
Only the Attributes 'id' and 'groups' going to bookstack?
@ssddanbrown commented on GitHub (Nov 28, 2022):
Yeah, only those are going to BookStack.
I'm not really familiar with UCS at all, but there seems to be a lot of configuration/mapping at that layer so might be something not aligned, or something missing to request the required attributes from the upstream LDAP system.
I can't really advise outside of what's reaching BookStack.
@kubuntu70 commented on GitHub (Nov 28, 2022):
Thank you for the quick reply. I'm doing a task at the UCS.
@kubuntu70 commented on GitHub (Nov 29, 2022):
solved, the attributes had to be released first!
!I love Bookstack !!