saml-slo-sample's Introduction

Sample passport saml app with SLO with Auth0

This project uses passport-saml and auth0 to demonstrate SP Initiated SLO with Auth0

Requirements

node.js
express
passport saml
auth0 tenant with an application and a connection enabled

Used middlewares

passport
express cookie
express session
morgan

Auth0 Setup

Create an Auth0 tenant
Create an application of type Regular Web Application
Go to the addons tab
Click on the SAML2 WEB APP and then click on settings
Set the Application callback url - BASEURL/login/callback where BASEURL is the same as the BASE url of the app you set in the .env file below

Set the settings as

{
    "mapUnknownClaimsAsIs": true,
    "passthroughClaimsWithNoMapping": true,
    "logout": {
        "callback": "BASEURL/singlelogout",
        "slo_enabled": true
    },
    "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
}

Scroll to the bottom of this dialog and click "Save" and then close the dialog
Make sure your application has at least one connection enabled
- Click on the application's Connections tab and enable the connection you would like to use for this application

ENV

Before running the app, you should create your own .env file in the root with the following variables:

PORT=3001
ISSUER=saml-sp
BASEURL=<apps base url>
IDP_ENTRYPOINT=<SAML IDP url. You get this value from the Auth0 apps SAML Addon's Usage page>
IDP_SIGNING_CERT_STR="The IDP signing certificate with newlines removed and the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- stripped out"
SESSIONSECRET=This is a great big secret for the session

Running

* Make sure you have set the .env file and completed the Auth0 Setup

npm install
npm start
open browser at BASEURL and click on login
Once logged in see the SAML Assettion and scroll to the bottom of the page and click logout to see the SLO flow

Recommend Projects