[PR #1998] [MERGED] Add support Windows Authentication via SAML #5935

New Issue

OVERLORD · 2026-02-05T10:20:47+03:00

OVERLORD commented

2026-02-05 10:20:47 +03:00

📋 Pull Request Information

Original PR: https://github.com/BookStackApp/BookStack/pull/1998
Author: @ivir
Created: 4/3/2020
Status: ✅ Merged
Merged: 5/8/2021
Merged by: @ssddanbrown

Base: master ← Head: ivir-authncontext

📝 Commits (1)

0344784 Add support Windows Authentication via SAML

📊 Changes

2 files changed (+13 additions, -1 deletions)

View changed files

📝 .env.example.complete (+7 -1)
📝 app/Config/saml2.php (+6 -0)

📄 Description

With default SAML configuration wasn't possible use Windows Authentication via AD FS and everytime is offered only login via AD FS form. That is due missing 'requestedAuthnContext' set to false when
IDP choose available method. Instead of that is send request with "'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport" which on AD FS force to use form.
I just use setting from onelogin/php-saml/advanced_settings and provide configuration to .ENV file

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/BookStackApp/BookStack/pull/1998 **Author:** [@ivir](https://github.com/ivir) **Created:** 4/3/2020 **Status:** ✅ Merged **Merged:** 5/8/2021 **Merged by:** [@ssddanbrown](https://github.com/ssddanbrown) **Base:** `master` ← **Head:** `ivir-authncontext` --- ### 📝 Commits (1) - [`0344784`](https://github.com/BookStackApp/BookStack/commit/034478409e3101d9fad8a4073112ffcb3f7852fa) Add support Windows Authentication via SAML ### 📊 Changes **2 files changed** (+13 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `.env.example.complete` (+7 -1) 📝 `app/Config/saml2.php` (+6 -0) </details> ### 📄 Description With default SAML configuration wasn't possible use Windows Authentication via AD FS and everytime is offered only login via AD FS form. That is due missing 'requestedAuthnContext' set to false when IDP choose available method. Instead of that is send request with "'urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport" which on AD FS force to use form. I just use setting from onelogin/php-saml/advanced_settings and provide configuration to .ENV file --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

OVERLORD added the pull-request label 2026-02-05 10:20:47 +03:00

OVERLORD closed this issue

2026-02-05 10:20:49 +03:00

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/BookStack#5935