Stages Documentation

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
712:integration:saml [2026/02/20 13:51] – [Generate the SAML SP metadata] Suess, Bernhard712:integration:saml [2026/03/19 09:31] (current) – Doczkal, Tristan
Line 85: Line 85:
   * EntityIdfromMetadata   * EntityIdfromMetadata
  
-  * SingleSignOnServiceLocationFromMetadata (should be HTTPS, please see [[:general:saml-note-samesite|]])+  * SingleSignOnServiceLocationFromMetadata (should be HTTPS, please see [[:general:saml-note-samesite]])
  
   * DisplayName (alternative: FirstName, LastName)   * DisplayName (alternative: FirstName, LastName)
Line 92: Line 92:
  
 for the following configuration: for the following configuration:
-<code> 
  
 +<code ->
 <authentication <authentication
      enabled="true"      enabled="true"
Line 184: Line 184:
     <identity-provider providerId="STAGES"/>     <identity-provider providerId="STAGES"/>
 </authentication> </authentication>
- 
 </code> </code>
  
-After you configured the service provider and identity provider in ''config.xml'', update the configuration via "stages update'' and restart the Stages service. +After you configured the service provider and identity provider in ''config.xml'', update the configuration via "stages update'' and restart the Stages service.''
  
 ===== Changing the license pool and license type for existing users ===== ===== Changing the license pool and license type for existing users =====
  
-By default, existing users are not modified by the SAML authentication process when the SAML configuration was changed after the user had been created. However, you can set the ''forceLicensePoolReassignment''  attribute on an ''identity-provider-attribute-match''  to ''true''  if you want changes of the ''licensePoolIdent''  or ''defaultLicenseType''  attributes to be applied to existing users.+''By default, existing users are not modified by the SAML authentication process when the SAML configuration was changed after the user had been created. However, you can set the ''forceLicensePoolReassignment''  attribute on an ''identity-provider-attribute-match'' to ''true'' if you want changes of the ''licensePoolIdent''  or ''defaultLicenseType''  attributes to be applied to existing users.  ''
  
 ===== Configuring Stages attributes in default-matcher section with JavaScript ===== ===== Configuring Stages attributes in default-matcher section with JavaScript =====
- 
 JavaScript control flow statements (e.g. "if","switch") can be used to configure values for Stages attributes. All assertion attributes of the SAML response are accessible as variables and can be used in the JavaScript expression JavaScript control flow statements (e.g. "if","switch") can be used to configure values for Stages attributes. All assertion attributes of the SAML response are accessible as variables and can be used in the JavaScript expression
  
Line 288: Line 285:
 Please note that the values of multi value attributes are provided to the scripts as one value as a comma separated string. Please note that the values of multi value attributes are provided to the scripts as one value as a comma separated string.
  
-=====   =====