2020-05-04 09:33:05 +00:00
|
|
|
# SAML2 auth plugin for PeerTube
|
|
|
|
|
|
|
|
|
|
Add SAML2 support to login form in PeerTube.
|
2020-05-04 13:34:58 +00:00
|
|
|
|
2020-05-26 10:07:57 +00:00
|
|
|
The initial code of this plugin has been developed with the financial support of the "Direction du Numérique pour l'Éducation du Ministère de
|
|
|
|
|
l'Éducation et de la Jeunesse" (french Ministry of National Education).
|
|
|
|
|
|
2020-05-04 13:34:58 +00:00
|
|
|
## Keycloak example
|
|
|
|
|
|
|
|
|
|
### Signature
|
|
|
|
|
|
|
|
|
|
If you want to sign get requests:
|
|
|
|
|
* Generate a certificate and private key: `openssl req -newkey rsa:2048 -new -nodes -x509 -days 3650 -keyout key.pem -out cert.pem`
|
|
|
|
|
* Import `cert.pem` in keycloak SAML client
|
|
|
|
|
* Copy `cert.pem` and `key.pem` in PeerTube SAML plugin settings
|
|
|
|
|
* Check the *Sign get request* checkbox in PeerTube SAML plugin settings
|
|
|
|
|
|
|
|
|
|
### Provider certificate
|
|
|
|
|
|
|
|
|
|
You can find the public key on: `http://keycloak.example.com/auth/realms/{realm}/protocol/saml/descriptor`.
|
