[{"_1":2,"_153":-5,"_154":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_132":133},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":11},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_84":-5,"_85":86,"_125":-5,"_126":11,"_127":17,"_128":11,"_129":-5,"_130":131},"canonicalUrl","https://hub.docker.com/r/kovarikkarel/saml-proxy/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","kovarikkarel","reponame","saml-proxy","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_38":39,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":51,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":70,"_75":11,"_76":77,"_81":29,"_82":83},"categories",[],"content_types",[40],"image","date_registered","2020-04-02T19:48:37.11947Z","description","SAML Reverse proxy, mainly to be used as container sidecar","is_private","last_updated","2020-04-02T21:19:30.01637Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[52],"application/vnd.docker.container.image.v1+json","name","pull_count",162,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# SAML Reverse Proxy\n\nForked from: https://github.com/bsudy/saml-proxy\n\nApache HTTP server with this plugin: \nhttps://github.com/latchset/mod_auth_mellon\n\nDocs:\nhttps://jdennis.fedorapeople.org/doc/mellon-user-guide/mellon_user_guide.html\n\n## Features\n\n* SAML Single Sign On (Assertion using POST, PAOS, Artifact)\n* SAML Single Sign Out (Frontend channel, SOAP)\n* Forwarding of SAML Attributes as HTTP-Headers\n* IDP Metadata fetched from remote URL during startup\n\n## Environment variables\n\n| Property | Description | Example |\n|----------|-------------|------|\n| `BACKEND`| backend to proxy requests to, can be localhost when using as sidecar | `http://127.0.0.3000` (mandatory) |\n| `PROXY_HOST`| host DNS record this proxy is available, without schema | `my-domain.com` (mandatory) |\n| `PROXY_SCHEMA` | schema DNS on which proxy is available, however TLS termination is not handled, proxy does listen using http | `https` (default) |\n| `LISTEN_PORT`| port to listen on, do not change if not in conflict | `3063` (default) |\n| `IDP_METADATA`| A URL to the metadata from the IDP, downloaded when the container is started, can be internal k8s DNS | `https:///saml/descriptor` |\n| `UNSECURED_URI` | location to be exposed as unsecured, usable for external healthchecks for example. | `/api/health` (optional)\n| `REMOTE_USER_NAME_SAML_ATTRIBUTE`| the SAML attribute to be sent as `Remote-User-Email` HTTP header | `username` |\n| `REMOTE_USER_EMAIL_SAML_ATTRIBUTE`| the SAML attribute to be sent as `Remote-User-Name` HTTP header | `EmailAddress` |\n| `REMOTE_USER_PREFERRED_USERNAME_SAML_ATTRIBUTE`| the SAML attribute to be sent as `Remote-User-Preferred-Username` HTTP header | `PreferredUsername` |\n| `SAML_MAP_<>`| this will map the `saml_field` to a request header specified by the property | `SAML_MAP_EmailAddress=X-WEBAUTH-USER` will map `EmailAddress` SAML field to `X-WEBAUTH-USER` request header. |\n\n## Volumes\n\n| Path | Description | \n|----------|-------------|\n| `/etc/httpd/conf.d/saml_idp.xml`| SAML IPD metadata (_mandatory_ unless using IDP_METADATA env) | \n| `/etc/httpd/conf.d/saml_sp.key`| SAML SP key (generated if not provided) | \n| `/etc/httpd/conf.d/saml_sp.cert`| SAML SP certificate (generated if not provided) | \n| `/etc/httpd/conf.d/saml_sp.xml`| SAML SP metadata (generated if not provided) | \n\n\n## SAML Descriptor example\n\n```\n\n\"\n xmlns=\"urn:oasis:names:tc:SAML:2.0:metadata\">\n \n \n \n \n MIICxDCCAawCCQ.....=\n \n \n \n \n \n \n MIICxDC.....=\n \n \n \n /mellon/logout\" />\n /mellon/logout\" />\n urn:oasis:names:tc:SAML:2.0:nameid-format:transient\n /mellon/postResponse\" />\n /mellon/artifactResponse\" />\n /mellon/paosResponse\" />\n \n\n\n```\n\n# Example use\n\nFor keycloak see info: https://www.keycloak.org/docs/latest/securing_apps/#_mod_auth_mellon\n\nTBA","has_starred","hub_user","immutable_tags_settings",{"_71":11,"_72":73},"enabled","rules",[74],".*","is_automated","permissions",{"_78":17,"_79":11,"_80":11},"read","write","admin","user","storage_size",113081104,"orgData","recentTags",[87],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":96,"_46":114,"_115":90,"_116":29,"_117":52,"_53":118,"_119":120,"_121":105,"_122":114,"_123":62,"_124":17},"content_type","creator",8377853,"full_size",113077029,"id",93672323,"images",[97],{"_98":99,"_100":101,"_102":103,"_104":105,"_106":107,"_108":109,"_110":103,"_111":-5,"_112":92,"_59":62,"_113":-5},"architecture","amd64","digest","sha256:3469bf4162bda8ed1a9ed823221b12e6b9c72f18269b9c905ff29584187f1786","features","","last_pulled","2026-09-17T05:43:28.59596608Z","last_pushed","2020-04-02T21:19:30Z","os","linux","os_features","os_version","size","variant","2020-04-02T21:19:29.639856Z","last_updater","last_updater_username","media_type","latest","repository",8761864,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":134,"_141":142,"_130":151,"_152":11},{"_36":135,"_38":136,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":137,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":138,"_75":11,"_76":140,"_81":29,"_82":83},[],[40],[52],{"_71":11,"_72":139},[74],{"_78":17,"_79":11,"_80":11},"tags",{"_143":60,"_144":-5,"_145":-5,"_146":147},"count","next","previous","results",[148],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":149,"_46":114,"_115":90,"_116":29,"_117":52,"_53":118,"_119":120,"_121":105,"_122":114,"_123":62,"_124":17},[150],{"_98":99,"_100":101,"_102":103,"_104":105,"_106":107,"_108":109,"_110":103,"_111":-5,"_112":92,"_59":62,"_113":-5},[],"canDeleteTags","actionData","errors"]

kovarikkarel/saml-proxy

Tags for kovarikkarel/saml-proxy