Support for SAML2 Federation and Discovery Service

[luizakuze]

Hi, I'm implementing a service provider using passport-saml, and I need to include it in an existing SAML2 federation.

In our context, we use a discovery service where users can select their identity provider. I’ve worked with SAML in other languages, where libraries provide built-in support for loading federation metadata and dynamically handling multiple IdPs.

However, in passport-saml, I haven't found any way to load a federation metadata file or dynamically configure IdPs based on the selected one from the discovery service.

Is there any recommended way to implement SAML2 federation support in passport-saml?
If not, does anyone know how to implement this in node.js?

Thanks!

[markstos]

There's nothing built-in, but you can make your own request to fetch an Metadata XML file, parse it and use the details to configure passport-saml / node-saml.

There is support for dynamically configuring IdPs. See the section on multiple providers.

https://github.com/node-saml/passport-saml?tab=readme-ov-file#configure-strategy-for-multiple-providers