Self hosting for few apps.

[itsmekingtiger]

I run a small club with about 10 members.

The email service club using offers SAML authentication.

I want to integrate self-hosted services like a forum and Outline with OIDC (or OAuth) SSO.

I’m trying to integrat Outline, but I have a few questions:

1. Can I use the free self-hosted version of SAML Jackson for this purpose?

   • All the mentioned services support or can be modified to support OIDC or OAuth.

2. What does the "Connection" concept in the "Enterprise SSO" tab refer to?

   • The link between Jackson and the SAML IdP?
   • The entire connection between the SAML IdP and apps via Jackson?
     • If so, is the IdP-to-app relationship 1:1 or 1:n?
     • If 1:n, do multiple apps share the same Client ID and Client Secret?
     • If 1:1, since the SP Entity ID cannot be changed, does this mean only one app can use SSO without a commercial license(SAML Federation)?

[deepakprabhakara]

@itsmekingtiger I am not sure I fully understand your requirements but you can use our free self-hosted version though if you don't need SAML then there are probably better alternatives out there for OAuth2/OIDC support.

2. A connection is a link to a unique SAML or OIDC app created for each of the enterprise customers you are looking to onboard. Enterprise SSO is tenanted, so in effect a connection is a tenant with regards to Enterprise SSO. IdP to app relationship is 1:1 but in Jackson you can have 1:n relationship between tenant+product and IdPs, ie. you can support multiple IdPs via an automatic selection screen we show. Our commercial license is not based on the number of connections so you can have more than one in the free self-hosted version. The current enterprise features are Custom Branding and Identity Federation.

Happy to clarify this further if you are able to give us examples of how you expect the flows to work between your apps, Jackson and the IdPs.

[itsmekingtiger]

Ah. I see.

My question is simply I have a SAML IdP. Can I use SAML Jackson to support SSO for multiple OAuth apps?

Thankyou for kind reply.

[deepakprabhakara]

@itsmekingtiger You absolutely can.