Skip to main content
Legend
November 16, 2017
Question

Anyone know of a CF SAML integration example or walk through?

  • November 16, 2017
  • 3 replies
  • 2721 views

I’m reasearching how to incorporate a SAML integration into a CF app. The bigger picture is an external Active Directory source, SAML to a CF app with its own user management. Any info is helpful. 

This topic has been closed for replies.

3 replies

Legend
July 29, 2019

For us, the project is still on the back burner. No progress.

Known Participant
July 29, 2019

Which route did you go?  I have a client needing to interface with one of their client's SSO providers and their provider grants access thru SAMLv2 or WS-FED.

Charlie Arehart
Community Expert
Community Expert
July 29, 2019

Have you looked at SSOEasy? Not free, no, but not expensive and they offer great support, including setting up the free trial to confirm if things would work well for you.

/Charlie (troubleshooter, carehart. org)
Known Participant
July 29, 2019

They already have an SSO provider in-house that my client's client handles.  I just need to process their SAML response.  That is what I was asking about.  Sorry for any confusion.

Inspiring
December 31, 2017

What role will the CF server provide in the SAML workflow?  When I did this recently I used a third party provider (Auth0, but there are many good providers out there) as the IdP and service provider.  Auth0 can then connect to AD, client DB, or act the DB.  The ColdFusion server (or your front end, such as AngularJS) can communicate with the provider and handle the handshake and validation.

There are also articles on setting up CF to handle this instead, but I did not go this route for a number of reasons.  Googling for "ColdFusion SAML" will show a few StackOverflow answered questions and blog posts that might get you started.  HTH!

-Nic

Legend
January 2, 2018

Thanks for the reply. After reading various horror stories on SAML (SAML in general, not CF specifically), I was pointed in the direction of OpenID instead. While I have not done any development yet, what I read looks promising and it'll work in the environment I was scoping out.