Access control: SSO with SAML2 / ADFS
Linkurious supports any SAML2 compatible provider as external authentication providers.
To set up Linkurious authentication with a SAML2 provider, you need to obtain the following parameters from the provider:
groupAttribute is the attribute of the SAML response containing the array of groups a user belongs to.
access.saml2 configuration with any SAML2 provider:
"access":// [...]"saml2":"enabled": true"url": """identityProviderCertificate": "/Users/example/linkurious/saml.cert""groupAttribute": "Groups"
In particular, ADFS (Active Directory Federation Services) is a SAML2 provider that offers Single-Sign-On towards an Active Directory service.
To set up Linkurious authentication with ADFS, Linkurious has to be configured as a Relying Party Trust in ADFS.