fusionauth-samlv2

SAML v2.0 bindings in Java using JAXB (by FusionAuth)

Fusionauth-samlv2 Alternatives

Similar projects and alternatives to fusionauth-samlv2

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better fusionauth-samlv2 alternative or higher similarity.

fusionauth-samlv2 reviews and mentions

Posts with mentions or reviews of fusionauth-samlv2. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2023-05-25.
  • php-saml VS fusionauth-samlv2 - a user suggested alternative
    2 projects | 25 May 2023
    This repository is SAML v2.0 bindings in Java using JAXB.
  • Supabase Auth: SSO, Mobile, and Server-Side Support
    7 projects | news.ycombinator.com | 13 Apr 2023
    Disclosure, I work for FusionAuth, which can both integrate with and compete with Supabase.

    Welcome, Supabase, to the world of SAML/SSO. It's a hairy one, but single sign-on is undifferentiated and really great for customers, so I'm glad you joined.

    A few thoughts:

    * Consider adding identity linking to your roadmap. I noticed[0] that you don't support it, and will create duplicate accounts if someone uses SSO with the same email address that an existing account has. As a model, FusionAuth offers seven linking strategies[1]. This flexibility lets you handle more use cases.

    * I'd encourage you (and your customers) to test across as many SPs as you can. SAML is an 800+ page specification and even though we've been offering SAML for over 10 years and have open sourced our bindings[2], we still have edge cases that pop up.

    * I'd love to add FusionAuth as a SAML SSO provider to your docs, so will put that on our team's doc roadmap and submit a PR. :)

    * Not related to SAML, but I'm glad that you are working towards supporting PKCE. I hope you deprecate the implicit grant; the XSS threat is very real and the OAuth 2.1 spec (still in progress) basically deprecates that grant[3] throw omission. Also, we agree that setting cookies (HTTPOnly and secure, please) is a great way to store tokens[4] and that is worth requiring a server side component in applications.

    Finally, I understand why this is part of a paid offering; SAML is often used to segment out enterprise customers with $$$. You like to make money, as do we all. But I'd encourage you to think about a free tier because it is so helpful to the user experience. Maybe 1 SAML connection could be part of the base offering?

    0: https://supabase.com/docs/guides/platform/sso

    1: https://fusionauth.io/docs/v1/tech/identity-providers/#linki...

    2: https://github.com/FusionAuth/fusionauth-samlv2/commits/mast...

    3: https://oauth.net/2.1/

    4: https://fusionauth.io/learn/expert-advice/oauth/oauth-token-...

  • SAML Is Insecure by Design
    5 projects | news.ycombinator.com | 5 Aug 2021
    We recommend OIDC, but support SAML because customers.

    We implemented our own SAML processing library, too: https://github.com/FusionAuth/fusionauth-samlv2

    (We pay for valid security bugs.)

  • A note from our sponsor - WorkOS
    workos.com | 19 Apr 2024
    The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning. Learn more →

Stats

Basic fusionauth-samlv2 repo stats
3
5
4.6
about 2 months ago

FusionAuth/fusionauth-samlv2 is an open source project licensed under Apache License 2.0 which is an OSI approved license.

The primary programming language of fusionauth-samlv2 is Java.

SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com