| Table of Contents |
|---|
| English |
|---|
Introduction Joget is a low-code no-code rapid application development platform, It’s unique plugin architecture allows one to extend its functionality to any level. Integration with external directory services is one of the key features. SAML is a general API that most of the many directory platforms use to enable SSO. Single Sign-On (SSO). Essentially, SSO means you can use the authentication from an external platform, It is a really great feature for any Enterprise, While using multiple applications they don’t require their end-user as a service provider can delegate authentication to an external identity provider (idP), where one set of credentials available in the idP can be re-used to login to many other services as well. This plugin source code is available in a new open source repository at https://github.com/jogetoss/. JogetOSS is a community-led team for open source software related to the Joget no-code/low-code application platform. JogetOSS Github. Projects under JogetOSS are community-driven and community-supported, and you are welcome to contribute to the projects. |
...
Keycloak
Keycloak is one of the Directory service providers that have the ability to connect to multiple directory services, It can also work as an Identity Provider.
...
Integration
Joget allows integration with any platform using SAML with help of SAML plugin which can be downloaded from the marketplace. Download the plugin and install the plugin in the manage plugins section.
https://marketplace.joget.org/jw/web/userview/mp/mpp/_/vad?id=wflow-saml-v5
Once you install the plugin, You need to whitelist the external API call so SAML API can be accessed from the end-users browser.
Plugin Configuration
Once you install the plugin you can enable the directory manager configuration to use SAML authentication.
...
Configure other settings as per your industry requirements.
KeyCloak Configuration
Creating a client in Keycloak will enable the SSO from the keycloak application.
...
Mapping Name | SAML Attribute Name |
X500 surname | User.LastName |
X500 givenName | User.FirstName |
X500 email |
Final
...
Tweaks
To make it easier for your user to access the keycloak login page, You can add an option in your joget Login screen to open the KeyCloak Authentication Page.
Open your AppCenter in userview builder-> Settings-> Login Page UI -> Add the Custom HTML under the login form.
...