Integrate SSO with Google SAML

[pmquang]

A clear and concise description of what you want to accomplish.

hi @greenpau ,

I don't know if this is a proper place to ask, but I'm seeking helps to configure SSO with Google SAML:

{
	debug
	order authenticate before respond
	order authorize before basicauth

	security {
		saml identity provider google {
			realm google
			driver generic
			idp_metadata_location /root/caddy/google/google-saml-metadata.xml
			entity_id https://accounts.google.com/o/saml2?idpid=C01k107kt
			idp_login_url https://accounts.google.com/o/saml2/idp?idpid=C01k107kt
			idp_sign_cert_location /root/caddy/google/certificate.pem
			application_name "Google SAML Auth"
			acs_url https://auth.quangpm.net/saml/google
		}

		authentication portal myportal {
			crypto default token lifetime 3600
			crypto key sign-verify 8x27pg7bbIB7mPi/1VjoeJxfDOfAGdZXKmEMqS7R6TE=
			enable identity provider google
			cookie domain quangpm.net
			ui {
				links {
					"Main Site" https://asset.quangpm.net/ icon "las la-star"
					"My Identity" "/whoami" icon "las la-user"
				}
			}
			transform user {
				match realm google
				action add role authp/user
			}
		}

		authorization policy mypolicy {
			set auth url https://auth.quangpm.net/
			allow roles authp/admin authp/user
			crypto key verify 8x27pg7bbIB7mPi/1VjoeJxfDOfAGdZXKmEMqS7R6TE=
		}
	}
}

(tls_config) {
	tls /root/caddy/server.crt /root/caddy/server.key
}

auth.quangpm.net {
	import tls_config
	authenticate with myportal
}

asset.quangpm.net {
	import tls_config
	authorize with mypolicy
	root * /srv/
	file_server
}

I try configuring Google SAML like this but it doesn't work, when I clicked on the Login button, it showed

Error parsing the request, No SAML message present in request That’s all we know.

Is there anything wrong here, it should be a POST or GET with URL params to Google SSO ? I only see it redirected to https://accounts.google.com/o/saml2/idp?idpid=C01k107kt

[greenpau]

@pmquang , please upload attach the file with the logs. I see you already have debug enabled.

[pmquang]

@pmquang , please upload attach the file with the logs. I see you already have debug enabled.

Here you are sir @greenpau , logs from when I access to https://auth.quangpm.net to I meet the error

caddy.log