wlabarron / yourls-saml Goto Github PK

Single logout (SLO) is not currently implemented -- a dummy SLO URL is provided in the SAML SP settings (it's just one of the demo SLO endpoints from the php-saml library), and the log out link has been removed from the YOURLS interface. The only reason for this is I don't currently have access to a SAML IdP which supports SLO, so I can't test anything.

The explanation of what the "admin" role means in the context of specifying users in the config file is confusing, and could be interpreted to mean that users need to be specified here in order to access the administrator interface of YOURLS. That's not true -- "admin" in this context means the user can manage plugins, etc.

I'm trying to get this working for an Azure AD logon, but I keep getting an error like this:

AADSTS75011: Authentication method 'X509, MultiFactor' by which the user authenticated with the service doesn't match requested authentication method 'Password, ProtectedTransport'.

Googling around takes me to:

https://github.com/onelogin/php-saml/blob/master/advanced_settings_example.php

And it seems to suggest I should set:

'requestedAuthnContext' => false,

How could I get this working in your plugin please? I'm not sure what to do. Thanks!

I tried to install yourls-saml in Yourls project multiple times.
But I always got invalid_response, Not authenticated. Not sure why it's not working.

Please share the solution asap.

Thanks