Skip to content

Add "authorizing_realms" support to SAML realm#32349

Merged
tvernum merged 7 commits intoelastic:security-lookup-realmsfrom
tvernum:lookup-realm/saml
Aug 10, 2018
Merged

Add "authorizing_realms" support to SAML realm#32349
tvernum merged 7 commits intoelastic:security-lookup-realmsfrom
tvernum:lookup-realm/saml

Conversation

@tvernum
Copy link
Copy Markdown
Contributor

@tvernum tvernum commented Jul 25, 2018

Allows a SAML realm to lookup user data from another realm (e.g.
native, or LDAP) rather than using role mapping from SAML attributes

The user's principal is still pulled from the SAML response (nameid, or a specified attribute), but no other SAML attributes are used.

Allows a SAML realm to lookup user data from another realm (e.g.
native, or LDAP) rather than using role mapping from SAML attributes
@tvernum tvernum added review :Security/Authentication Logging in, Usernames/passwords, Realms (Native/LDAP/AD/SAML/PKI/etc) :Security/Authorization Roles, Privileges, DLS/FLS, RBAC/ABAC labels Jul 25, 2018
@tvernum tvernum requested review from jaymode and jkakavas July 25, 2018 03:05
@elasticmachine
Copy link
Copy Markdown
Collaborator

Pinging @elastic/es-security

Copy link
Copy Markdown
Member

@jaymode jaymode left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@albertzaharovits albertzaharovits self-requested a review August 1, 2018 13:13
Copy link
Copy Markdown
Contributor

@albertzaharovits albertzaharovits left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM Tim 👍

@tvernum tvernum merged commit 34f14f3 into elastic:security-lookup-realms Aug 10, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

:Security/Authentication Logging in, Usernames/passwords, Realms (Native/LDAP/AD/SAML/PKI/etc) :Security/Authorization Roles, Privileges, DLS/FLS, RBAC/ABAC

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants