Forum Discussion

Hamada_Tabosha_'s avatar
Hamada_Tabosha_
Icon for Nimbostratus rankNimbostratus
Nov 04, 2017

SAML with application privileges challenge

I have multiple applications with different authentication credentials (local authentication inside the app) Here SAML is the best choice in the APM right? and APM can uses LDAP auth and do credential insertion when communicating to the App server right?

 

Now suppose that : User 1 in appA has username USER_1 and password 123 while in LDAP has username User-1 and password 111

 

Now how SAMl will work here : If we keep the local app auth on, then the inserted credentials will be wrong and the server will refuse the auth.

 

If we disable the local auth, and depends only on the auth done by the APM, still we will not be able to manage the authorization and privileges for each user inside the application

 

1 Reply

  • SAML is usually used as an authentication method towards other applications without actually sending a password there. so you assume the application supports it.

     

    to use it like you suggest now isn't really the way it was meant.

     

    can't you sync the passwords over the different applications?