SAML 2.0 with OSTicket 1.17.2

kasun

Hi All,

Is there any official plugin we can use for SAML 2.0 authentication with OSTicket? Appreciate your help

KevinTheJedi

kasun

Not at this time, no. However you can configure OAuth2 SSO for Users and Agents.

Cheers.

kasun

Thank you for the update. Then I may be able to use OAuth2 plugin to allow users to authenticate via azure AD right?

KevinTheJedi

kasun

Yes, O365 has OAuth2 SSO available. I'm admittedly an O365 noob so not sure if it's possible to connect to existing AD group or if you will need to add the users/agents to the app manually. Either way though it is possible.

Cheers.

pcjkollmorgen

There is a third-party plugin available for SAML auth which works well for us, however it does cost something. There may be some minor changes for the latest version of osTicket but it is written by a professional developer with lots of SAML experience and offers quite a lot of options.

The new Oauth2 plugin should also work in a similar, we just aren't really in a position to work fully with Azure AD whilst SAML is a fully supported and well understood setup here.

ValerioP

We use Shibboleth/SAML and (a little bit modified) OST auth-passthru plugin
to authenticate few external agents with company SSO.
Here you can find someone who did it with Azure:
https://rohanislam2.medium.com/azure-ad-saml-federation-using-shibboleth-sp-ad40f9c94eab

KevinTheJedi

sixtomarttin Please don’t advertise paid products.

sixtomarttin

KevinTheJedi , it was not an ads, it was a reply to the explicit question about SAML support.

I collaborate with multiple PHP open source projects (Moodle, Drupal, SugarCRM, Joomla, LimeSurvey, Magento, Workdpress, Dokuwiki, Tikiwiki, Matomo, phpBB, Xibo, Laravel, Yii2, ...), and sadly, in the unique place that seems I'm not welcome is in this forum 🙁

I only saw a gap years ago in terms of SSO on OsTicket and created a complete/professional plugin to satisfy the needs of OsTicket customers, and made it commercial to pay the effort of building and maintaining it, why is that wrong?

There are a lot of features on my SAML extension (just-in-time provisioning, support not only user attributes but org, departament etc, site protection) that could be adopted in the OAuth2 plugin, happy to demo/share them with you.

KevinTheJedi

sixtomarttin

I see where you’re coming from but making a post directly linking to a paid mod suggesting someone download it is advertising a paid product. We simply do not welcome that. I mean osTicket is completely free 🙂

As for the SAML plugin, thank you for the offer. However we've had our own SAML plugin in our hosted platform for a while now that we eventually plan to release to osTicket in the future (most likely with v2.0). Please stay tuned! Also, if you want to integrate your features into the core product(s) why not make a pull request?

Cheers.