Skip to main content
Jahia Store
EN

Jahia SAML Login/Logout URL Provider

community
Download 1.0.0

Information

Module ID
saml-login-provider
Group ID
org.jahia.community
Status
community
Category
Authentication
Author
Florent BOURASSE
Developer website
https://github.com/Jahia/saml-login-provider
Requires Jahia
8.2.3.0
Released
2026-10-13
Source
scm:git:git@github.com:Jahia/saml-login-provider.git

Redirects unauthenticated users straight to the SAML connect endpoint (/home.connect.saml) instead of the Jahia login page on configured hosts, and points the logout button to a public landing page so logout is not immediately cancelled by a silent SAML re-login. 

Ships a React administration UI (Server Administration) backed by GraphQL.

Dependencies

Depended on by

Nothing depends on this module.

Versions

1.0.0Download

What it does

On a site where the module is enabled and that has SAML authentication set up (an enabled saml-authentication-valve connector):

  • A host in the site's list goes straight to the SAML connect endpoint (/home.connect.saml), with no login form. Logout lands on a public page, so it isn't undone by a silent SAML re-login.
  • Any other host of the site, including every host when the list is empty, gets /saml-login: the standard credentials form plus a "Sign in with Google" button.

Everywhere else Jahia's standard login is untouched: a site where the module isn't enabled, a site with no SAML connector, or a host that resolves to no single site. Because a host is only redirected when its site has a working target, a misconfigured list can't lock visitors out.

Configuration

  • Where: each site's administration, at Administration → site → SAML auto-login (/jahia/administration/<siteKey>/samlLoginProvider). The screen shows the site's own host names and warns when the site has no SAML connector.
  • Permission: siteAdminSamlLoginProvider, checked on the site. An admin of one site can't change how any other site logs its visitors in.
  • Accepted hosts: only the site's own server name and aliases, and only those that no other site also declares.
  • Storage: one file per site, karaf/etc/org.jahia.community.samlloginprovider.site-<siteKey>.cfg.
  • GraphQL: samlLoginProvider { config(siteKey) / update(siteKey, fqdn) }.

Requirements

  • Jahia 8.2
  • jahia-authentication 2.1.0, a declared dependency. The SAML connector itself comes from saml-authentication-valve 4.x (with jcr-auth-provider 4.x for the user mapping), configured on each site that should use SAML.

Install

Upload saml-login-provider-1.0.0.jar in Administration → Server settings → Modules, enable the module on the sites that should use it, then set each site's list in its SAML auto-login screen.

Quality

  • Unit tests: 164 pass.
  • SonarQube: quality gate OK, 0 open issues, 96 % coverage.
  • Cypress: 19/19, including a full login round trip through a real Keycloak SAML IdP.
  • Security reviews: the per-site authorization model was reviewed, and the findings are fixed.
Requires Jahia 8.2.3.0Released 2026-10-13