Question2Answer Q&A - Recent questions tagged saml

Unable to call the function qa_log_in_external_user()

Mon, 26 Jul 2021 12:44:56 +0000

i am done with SAML azure integration but its getting logged in and not creating DB entry for new user. Hence other functions like points etc showing null. When i tried to call qa_log_in_external_user() function by require_one QA_INCLUDE_DIR. 'app/users.php';

Uncaught Error: Call to undefined function qa_log_in_external_user() {main} thrown in D:\nginx\faqs\qa-external\qa-external-users.php on line 305

SAML Authentication can be integrated?

Wed, 13 May 2020 12:02:38 +0000

Can I use SAML Authentication with latest Q2A? If Yes, can please provide any documentation to integrate SAML in Q2A.

Thanks in Advance

SAML 2.0 Authentication

Wed, 06 Sep 2017 02:59:58 +0000

Hello,

I'm building a q2a site which will be protected by a security filter that will require users to be authenticated via SAML 2.0/SSO. An unauthenticated user attempting to access the site will be intercepted by the filter, redirected to a login portal and then redirected back to the original site. Attributes sent back from the login portal are extracted and added as keys which can be retrieved with this php

foreach($_SERVER as $key=>$value) {
  if(substr($key, 0, 7) == 'MELLON_') {
    echo($key . '=' . $value . "\r\n");
  }
}

Note: MELLON is just the prefix the security filter adds to attributes passed from the login portal. Some of the attributes I'll get back are name, email, userid etc. Ideally, what I'd like to do is create a user if they don't exist using the attributes or if they do exist go on and log them in. I'm pretty sure I'll be using the qa_create_new_user function. But what other functions would be useful?

My question is what is am I on the right track? What is the best way to implement this (perhaps a plugin but what to override and how) I'd want to disable the login/register links since this would be done automatically in my use case. How can this be done?

I don't believe the out of box q2a SSO solution will work because it seems more focused on user databases than an external authentication provider.