Package: odoo12-addon-auth-saml
Let users log into Odoo via an SAML2 provider.This module allows to deport the management of users and passwords in an
external authentication system to provide SSO functionality (Single Sign On)
between Odoo and other applications of your ecosystem.Benefits:Reducing the time spent typing different passwords for different accounts.Reducing the time spent in IT support for password oversights.Centralizing authentication systems.Securing all input levels / exit / access to multiple systems without
prompting users.The centralization of access control information for compliance testing to
different standards.Table of contentsInstallationConfigurationGetting started with Authentic2Creating the certsConfiguring authenticConfiguring OdooUsageKnown issues / RoadmapChangelogBug TrackerCreditsAuthorsContributorsMaintainersInstallationThis addon requireslasso.ConfigurationTo use this module, you need an IDP server, properly set up. Go through the
“Getting started” section for more information.Getting started with Authentic2This is quick howto to help setup a service provider that will be able
to use the IDP from Authentic2We will mostly cover how to setup your rsa keys and certificatesCreating the certsUse easy-rsa from the easy-rsa package (or from the openvpn project)Example script below with comment saying what you should do between each
command:#clean your varssource./vars./build-dh./pkitool--initca#change your vars to math a new client certsource./vars./pkitoolmyclientCongratulations, you now have a client certificate signed by a shiny new
CA under you own private control.Configuring authenticWe will not describe how to compile requirements nor start an authentic server.Just log into your authentic admin panel:https://myauthenticserver/adminand create a new “liberty provider”.You’ll need to create a metadata xml file from a template (TODO)You’ll need to make sure it is activated and that the default protocol rules
are applied (ie: the requests are signed and signatures are verified)Configuring OdooGo toSettings > Activate the developer mode.Configure your auth providergoing toSettings > Users & Companies >
SAML Providers > Create. Your provider should provide you all that info.Go toSettings > Users & Companies > Usersand edit each user that will
authenticate through SAML.Go to theSAMLtab and fill both fields.Go toSettings > General settingsand uncheckAllow SAML users to posess
an Odoo passwordif you want your SAML users to authenticate only
through SAML.UsageConfigure it (see corresponding section in README)Just login with your SAML-provided password.Known issues / RoadmapChecks to ensure no Odoo user with SAML also has an Odoo password.Setting to disable that rule.Changelog2.0SAML tokens are not stored in res_users anymore to avoid locks on that tableBug TrackerBugs are tracked onGitHub Issues.
In case of trouble, please check there if your issue has already been reported.
If you spotted it first, help us smashing it by providing a detailed and welcomedfeedback.Do not contact contributors directly about support or help with technical issues.CreditsAuthorsXCG ConsultingContributorsFlorent Aide <florent.aide@xcg-consulting.fr>Vincent Hatakeyama <vincent.hatakeyama@xcg-consulting.fr>Alexandre Brun <alexandre.brun@xcg-consulting.fr>Jeremy Co Kim Len <jeremy.cokimlen@vinci-concessions.com>Houzéfa Abbasbhay <houzefa.abba@xcg-consulting.fr>Jeffery Chen Fan <jeffery9@gmail.com>Bhavesh Odedra <bodedra@opensourceintegrators.com>Tecnativa:
* Jairo LlopisMaintainersThis module is maintained by the OCA.OCA, or the Odoo Community Association, is a nonprofit organization whose
mission is to support the collaborative development of Odoo features and
promote its widespread use.This module is part of theOCA/server-authproject on GitHub.You are welcome to contribute. To learn how please visithttps://odoo-community.org/page/Contribute.