Live data from Hacker News

SAML: A Technical Primer

ssoready.com

11–20 of 100 posts

Re: SAML: A Technical Primer

#11

Since we're here, I hope someone creates another all encompassing SP/IDP emulator like samltest.id used to until the owner stopped paying. That made my life so much easier as a developer when SAML stuff came up. No one else has come close.

I use this one https://sptest.iamshowcase.com/

(Well, used : in luckily no longer in charge of an IdP with a bespoke SAML implementation so I don’t need to deal with this crap anymore!)

Re: SAML: A Technical Primer

#12

Since we're here, I hope someone creates another all encompassing SP/IDP emulator like samltest.id used to until the owner stopped paying. That made my life so much easier as a developer when SAML stuff came up. No one else has come close.

I'm working on that at the instant (I wrote this article). Sadly the samltest.id squatter wants at least $15k, super lame. dummyidp.com it is!

Re: SAML: A Technical Primer

#13

Since we're here, I hope someone creates another all encompassing SP/IDP emulator like samltest.id used to until the owner stopped paying. That made my life so much easier as a developer when SAML stuff came up. No one else has come close.

I use this one https://sptest.iamshowcase.com/ (Well, used : in luckily no longer in charge of an IdP with a bespoke SAML implementation so I don’t need to deal with this crap anymore!)

FWIW back in the day, samltest.id was a dummy IDP, whereas sptest.iamshowcase.com is a dummy SP. You could hook these two up to each other and see the whole flow.

Re: SAML: A Technical Primer

#14
> What is the point of SAML?

> You care about supporting SAML because your customer wants your product to support SAML. This is sound reasoning on your part. But why does your customer want SAML support?

> One click to login: why your users like SAML

What? No, the users don't know about SAML.

Anyways, no, users don't like SAML. OIDC has a much nicer UX.

Re: SAML: A Technical Primer

#16

Since we're here, I hope someone creates another all encompassing SP/IDP emulator like samltest.id used to until the owner stopped paying. That made my life so much easier as a developer when SAML stuff came up. No one else has come close.

I'm not familiar with samltest.id and what it provided, but https://mocksaml.com/ is a useful IDP testing tool.

Re: SAML: A Technical Primer

#17
> You care about supporting SAML because your customer wants your product to support SAML. This is sound reasoning on your part.

Is it just me or is anybody else going 'the fuck did I just read?' here? It's... incredibly condescending?

Re: SAML: A Technical Primer

#18
post #17

> You care about supporting SAML because your customer wants your product to support SAML. This is sound reasoning on your part. Is it just me or is anybody else going 'the fuck did I just read?' here? It's... incredibly condescending?

It is not you. Also SAML is just a nigthmire.

Re: SAML: A Technical Primer

#19

> What is the point of SAML? > You care about supporting SAML because your customer wants your product to support SAML. This is sound reasoning on your part. But why does your customer want SAML support? > One click to login: why your users like SAML What? No, the users don't know about SAML. Anyways, no, users don't like SAML. OIDC has a much nicer UX.

They specifically said "customers" not "users" and in my experience (healthcare) they're correct. Being able to tell customers IT departments you support SSO via SAML goes a long way towards getting a purchase approved.

Re: SAML: A Technical Primer

#20
post #19

> What is the point of SAML? > You care about supporting SAML because your customer wants your product to support SAML. This is sound reasoning on your part. But why does your customer want SAML support? > One click to login: why your users like SAML What? No, the users don't know about SAML. Anyways, no, users don't like SAML. OIDC has a much nicer UX.

They specifically said "customers" not "users" and in my experience (healthcare) they're correct. Being able to tell customers IT departments you support SSO via SAML goes a long way towards getting a purchase approved.

Ah, thanks for that clarification.
Post reply on HN