Skip to main content
Steve Sommers
Legend
Nov 16, 2017 6:08 PM UTC
Question

Anyone know of a CF SAML integration example or walk through?

I’m reasearching how to incorporate a SAML integration into a CF app. The bigger picture is an external Active Directory source, SAML to a CF app with its own user management. Any info is helpful. 

This topic is closed to new replies. Start a new post to keep the conversation going.

7 replies

Steve SommersAuthor
Legend
Jul 29, 2019 8:20 PM UTC

For us, the project is still on the back burner. No progress.

Translate
a.s.webster
Known Participant
Jul 29, 2019 1:49 PM UTC

Which route did you go?  I have a client needing to interface with one of their client's SSO providers and their provider grants access thru SAMLv2 or WS-FED.

Translate
Charlie Arehart
Community Expert
Charlie ArehartCommunity Expert
Community Expert
Jul 29, 2019 2:06 PM UTC

Have you looked at SSOEasy? Not free, no, but not expensive and they offer great support, including setting up the free trial to confirm if things would work well for you.

Translate
/Charlie (troubleshooter, carehart. org)
a.s.webster
Known Participant
Jul 29, 2019 2:08 PM UTC

They already have an SSO provider in-house that my client's client handles.  I just need to process their SAML response.  That is what I was asking about.  Sorry for any confusion.

Translate
nic_tunney
Inspiring
Dec 31, 2017 4:04 AM UTC

What role will the CF server provide in the SAML workflow?  When I did this recently I used a third party provider (Auth0, but there are many good providers out there) as the IdP and service provider.  Auth0 can then connect to AD, client DB, or act the DB.  The ColdFusion server (or your front end, such as AngularJS) can communicate with the provider and handle the handshake and validation.

There are also articles on setting up CF to handle this instead, but I did not go this route for a number of reasons.  Googling for "ColdFusion SAML" will show a few StackOverflow answered questions and blog posts that might get you started.  HTH!

-Nic

Translate
Steve SommersAuthor
Legend
Jan 2, 2018 11:21 PM UTC

Thanks for the reply. After reading various horror stories on SAML (SAML in general, not CF specifically), I was pointed in the direction of OpenID instead. While I have not done any development yet, what I read looks promising and it'll work in the environment I was scoping out.

Translate
Terms & ConditionsAccessibility statement
Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices