Aller au contenu principal
Jahia Store
FR

Jahia SAML Login/Logout URL Provider

community
Télécharger 1.0.0

Informations

Identifiant du module
saml-login-provider
Identifiant de groupe
org.jahia.community
Statut
community
Catégorie
Authentication
Auteur
Florent BOURASSE
Site web du développeur
https://github.com/Jahia/saml-login-provider
Nécessite Jahia
8.2.3.0
Publié le
2026-10-13
Source
scm:git:git@github.com:Jahia/saml-login-provider.git

Redirects unauthenticated users straight to the SAML connect endpoint (/home.connect.saml) instead of the Jahia login page on configured hosts, and points the logout button to a public landing page so logout is not immediately cancelled by a silent SAML re-login. 

Ships a React administration UI (Server Administration) backed by GraphQL.

Dépendances

Modules dépendants

Aucun module n'en dépend.

Versions

1.0.0Télécharger

What it does

On a site where the module is enabled and that has SAML authentication set up (an enabled saml-authentication-valve connector):

  • A host in the site's list goes straight to the SAML connect endpoint (/home.connect.saml), with no login form. Logout lands on a public page, so it isn't undone by a silent SAML re-login.
  • Any other host of the site, including every host when the list is empty, gets /saml-login: the standard credentials form plus a "Sign in with Google" button.

Everywhere else Jahia's standard login is untouched: a site where the module isn't enabled, a site with no SAML connector, or a host that resolves to no single site. Because a host is only redirected when its site has a working target, a misconfigured list can't lock visitors out.

Configuration

  • Where: each site's administration, at Administration → site → SAML auto-login (/jahia/administration/<siteKey>/samlLoginProvider). The screen shows the site's own host names and warns when the site has no SAML connector.
  • Permission: siteAdminSamlLoginProvider, checked on the site. An admin of one site can't change how any other site logs its visitors in.
  • Accepted hosts: only the site's own server name and aliases, and only those that no other site also declares.
  • Storage: one file per site, karaf/etc/org.jahia.community.samlloginprovider.site-<siteKey>.cfg.
  • GraphQL: samlLoginProvider { config(siteKey) / update(siteKey, fqdn) }.

Requirements

  • Jahia 8.2
  • jahia-authentication 2.1.0, a declared dependency. The SAML connector itself comes from saml-authentication-valve 4.x (with jcr-auth-provider 4.x for the user mapping), configured on each site that should use SAML.

Install

Upload saml-login-provider-1.0.0.jar in Administration → Server settings → Modules, enable the module on the sites that should use it, then set each site's list in its SAML auto-login screen.

Quality

  • Unit tests: 164 pass.
  • SonarQube: quality gate OK, 0 open issues, 96 % coverage.
  • Cypress: 19/19, including a full login round trip through a real Keycloak SAML IdP.
  • Security reviews: the per-site authorization model was reviewed, and the findings are fixed.
Nécessite Jahia 8.2.3.0Publié le 2026-10-13