meta data for this page
  •  

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
plugin:simplesaml [2025/03/22 14:24] – tatevikplugin:simplesaml [2025/05/03 11:39] (current) – [Keycloak] tatevik
Line 58: Line 58:
 It is recommended to only enable the plugin only after the `SIMPLESAMLPHP` configs are set in the various configuration files described above and or in the [README](https://github.com/phpList/phplist-plugin-simplesaml#readme). It is recommended to only enable the plugin only after the `SIMPLESAMLPHP` configs are set in the various configuration files described above and or in the [README](https://github.com/phpList/phplist-plugin-simplesaml#readme).
  
-== Important Checks ==+== Important Checks === 
 + 
 +==== Keycloak ==== 
 + 
 +Configure Keycloak using this guide: https://resources.phplist.com/system/keycloak 
 +Documentation: https://www.keycloak.org/documentation
  
 === `SimpleSAMLPHP` Installation check === === `SimpleSAMLPHP` Installation check ===
Line 65: Line 70:
 ![enter image description here](https://i.ibb.co/9pxM33T/simplesamlphp-success-install.png) ![enter image description here](https://i.ibb.co/9pxM33T/simplesamlphp-success-install.png)
  
-You should have saml-certificate.pem and saml-private-key.pem files (certificate keys of keycloak client) in main/simplesaml/simplesamlphp/cert directory and certificate as string in main/simplesaml/simplesamlphp/metadata/saml20-idp-rempte.php certData value+You should have saml-certificate.pem and saml-private-key.pem files in main/simplesaml/simplesamlphp/cert directory and certificate from IDP (keycloak) in saml-remote-idp.crt file 
 +Certificate keys of keycloak client can be generated with openssl commands: 
 +- openssl genpkey -algorithm RSA -out saml-private-key.pem -pkeyopt rsa_keygen_bits:2048 
 +- openssl req -new -x509 -key saml-private-key.pem -out saml-crtificate.pem) 
 +Remote idp certificate can be fetched from keycloak metadata descriptor (https://sso.phplist.com:8443/realms/master/protocol/saml/descriptor)
  
  
-=== Testing === 
 ==== Activation ==== ==== Activation ====