Hi All,
Is there any official plugin we can use for SAML 2.0 authentication with OSTicket? Appreciate your help
Hi All,
Is there any official plugin we can use for SAML 2.0 authentication with OSTicket? Appreciate your help
Thank you for the update. Then I may be able to use OAuth2 plugin to allow users to authenticate via azure AD right?
Yes, O365 has OAuth2 SSO available. I'm admittedly an O365 noob so not sure if it's possible to connect to existing AD group or if you will need to add the users/agents to the app manually. Either way though it is possible.
Cheers.
There is a third-party plugin available for SAML auth which works well for us, however it does cost something. There may be some minor changes for the latest version of osTicket but it is written by a professional developer with lots of SAML experience and offers quite a lot of options.
The new Oauth2 plugin should also work in a similar, we just aren't really in a position to work fully with Azure AD whilst SAML is a fully supported and well understood setup here.
We use Shibboleth/SAML and (a little bit modified) OST auth-passthru plugin
to authenticate few external agents with company SSO.
Here you can find someone who did it with Azure:
https://rohanislam2.medium.com/azure-ad-saml-federation-using-shibboleth-sp-ad40f9c94eab
sixtomarttin Please don’t advertise paid products.
KevinTheJedi , it was not an ads, it was a reply to the explicit question about SAML support.
I collaborate with multiple PHP open source projects (Moodle, Drupal, SugarCRM, Joomla, LimeSurvey, Magento, Workdpress, Dokuwiki, Tikiwiki, Matomo, phpBB, Xibo, Laravel, Yii2, ...), and sadly, in the unique place that seems I'm not welcome is in this forum
I only saw a gap years ago in terms of SSO on OsTicket and created a complete/professional plugin to satisfy the needs of OsTicket customers, and made it commercial to pay the effort of building and maintaining it, why is that wrong?
There are a lot of features on my SAML extension (just-in-time provisioning, support not only user attributes but org, departament etc, site protection) that could be adopted in the OAuth2 plugin, happy to demo/share them with you.
I see where you’re coming from but making a post directly linking to a paid mod suggesting someone download it is advertising a paid product. We simply do not welcome that. I mean osTicket is completely free
As for the SAML plugin, thank you for the offer. However we've had our own SAML plugin in our hosted platform for a while now that we eventually plan to release to osTicket in the future (most likely with v2.0). Please stay tuned! Also, if you want to integrate your features into the core product(s) why not make a pull request?
Cheers.