Wednesday, January 26, 2022

[389-users] Re: SSO and 389


I've done some SAML SSO integrations and work regularly with FreeIPA.

SSO is usually handled via a protocol like SAML, OpenID or Shibboleth, FreeIPA only serves as LDAP Identity database in these architectures.
Our deployments used a "proxy" to handle these authentications and link them with LDAP, SimpleSAMLPHP.

The implementation also depends a lot on the way you want to do SSO, centralized, federated, or cooperative.

I would recommend to take a look at simplesamlphp documentation as it supports almost every SSO protocols and can easily be integrated to proxy SSO web requests.


Le lun. 10 janv. 2022 à 19:50, Jonathan Aquilina <> a écrit :

Good Evening,


I am just wondering can 389 along side free ipa be used to offer SSO capabilities?




389-users mailing list --
To unsubscribe send an email to
Fedora Code of Conduct:
List Guidelines:
List Archives:
Do not reply to spam on the list, report it:

No comments:

Post a Comment