nornir-auth-saml
SAML 2.0 (enterprise SSO) auth PROVIDER for the nordisk servers — SP-side validation of a signed SAML assertion / response (HTTP-POST binding): cryptographically verify the XML-DSIG signature against the configured IdP certificate, check the conditions, and map the subject NameID to an identity. Enables ADFS / Entra ID / Okta / Ping SAML estates. Implements the shared `nornir_service::AuthProvider` seam via the `verify_saml_assertion` credential-shape method. REUSES the `samael` crate for the XML-DSIG crypto (does NOT hand-roll). HARD feature-gated: samael pulls the heavy native `xmlsec1` / `libxml2` / `openssl` stack, so it rides ONLY behind the off-by-default `saml` feature — the mini/embedded/airgap tiers link NONE of it and the provider fails closed without it. Consumed by holger (reference impl), korp, dwarves.
Activity
- Latest release
- 3w ago
- Total releases
- 2
- Cadence
- ~18 days
- Last 12 months
- 2
Reach
- Downloads
- 19
Details
- License
- MIT OR Apache-2.0
- First release
- Aug 05, 2026
| Version | Released | |
|---|---|---|
0.1.1
patch
|
0.1.1
patch
Dependencies (5)
|
|
0.1.0
initial
|
0.1.0
initial
Dependencies (5)
|