SimpleSAMLPhp, preconfigured as ID and memcached activated on same image.
2.1K
Images with Apache 2.4, PHP 8.3, SimpleSAMLPHP 2.3.6 and memcached installed.
SimpleSAMLPHP preconfigured as IDP, and set the config has multiple enviroment values to allow make modifications on run.
Recomended the use of docker compose (see the example below), with the required environment variables, and a recomended a tree small volumes, one for the config files, in case you need to modify something special, a second volume for the metadata info (the list of the allowed SP and their public signing certificates), and the last volume for the certificates that the IDP must use.
Once deployed, the the local volume for the "metadata" folder to edit the IDP config and add the allowed SPs.
Docker compose example:
---
services:
ssp:
image: vviudez/ssp-idp:latest
container_name: ssp
hostname: ssp
restart: unless-stopped
environment:
- PUID=1000
- PGID=1000
- TZ=UTC
- SSP_TECHNICAL_CONTACT=Administrator
- [email protected]
- SSP_SECRET_SALT=MySecretSalt
# Create an ARGON2ID hash password, and convert it to base64 (https://argon2.online/ and https://base64.guru/converter/encode)
- SSP_ADMIN_PASSWORD=JGFyZ29uMmlkJHY9MTkkbT02NCx0PTQscD0xJGMxcFVMMU5vYVZVNGMyNTVhVmRGY2ckM3NTSWtJdXcxMy9VUUtPMWxoQnI4OUNlT3B4OFk2bGVndlhoRmdZS291Zw==
- SSP_BASE_URL_PATH=saml/
- SSP_COOKIE_DOMAIN=.mydomain.net
- SSP_COOKIE_SECURE=true
- SSP_COOKIE_NAME=SAMLSessionCookie
- SSP_AUTH_COOKIE_NAME=SAMLAuthSessionCookie
- SSP_AUTH_PHPCOOKIE_NAME=SSPCK-SAML
# Set session store type (phpsession, memchache, sql, redis)
- SSP_STORE_TYPE=memcache
# If using Memcached
- SSP_MEMCACHE_HOST=localhost
- SSP_MEMCACHE_PORT=11211
- SSP_STORE_MEMCACHE_PREFIX=
- SSP_STORE_MEMCACHE_EXPIRES=24 * (60 * 60); // 24 hours.
# If using SQL Database
#- SSP_STORE_SQL_DSN=
#- SSP_STORE_SQL_USERNAME=
#- SSP_STORE_SQL_PASSWORD=
#- SSP_STORE_SQL_PREFIX=
# If using REDIS
#- SSP_STORE_REDIS_HOST=MyRedisServer
#- SSP_STORE_REDIS_PORT=6379
#- SSP_STORE_REDIS_PASSWORD=MyRedisPassword
#- SSP_STORE_REDIS_INSECURE=true
#- SSP_STORE_REDIS_PREFIX=ssp-saml
- SSP_MAIL_TRANSPORT=smtp
- SSP_MAIL_SERVER=mail.mydomain.net
- SSP_MAIL_PORT=25
- [email protected]
- [email protected]
- SSP_MAIL_PASSWORD=MySMTPPassword
- SSP_MAIL_SECURITY=tls
- SSP_LDAP_SERVERS=ldap://ldap-server01.mydomain.local ldap://ldap-server02.mydomain.local
- SSP_LDAP_SECURITY=tls
- SSP_LDAP_DEBUG=false
- SSP_LDAP_DN_SEARCH=uid=%username%,ou=Users,dc=mydomain,dc=local
- SSP_LDAP_SEARCH_BASE=dc=mydomain,dc=local
- SSP_LDAP_BIND_USER=uid=ldapUser,dc=mydomain,dc=local
- SSP_LDAP_BIND_PASSWORD=ldapUserPassword
- SSP_LOG_LEVEL=4
- SSP_DEBUG=true
- SSP_SHOW_ERRORS=true
- SSP_ENABLE_ERROR_REPORTING=true
# My Own Theme: Check this theme generator: https://safire.ac.za/technical/resources/simplesamlphp-theme-generator/
#- SSP_THEME_USE=mymodule:MyTheme
#- SSP_THEME_HEADER=MyHeader
volumes:
# Certificate files
- /opt/simplesaml/cert/simplesamlphp.pem:/etc/ssl/certs/simplesamlphp.pem
- /opt/simplesaml/cert/simplesamlphp.key:/etc/ssl/private/simplesamlphp.key
# or mount entire folder to use different cert files
#- /opt/simplesaml/cert/:/simplesamlphp/cert/
# Config folders
- /opt/simplesaml/config/:/simplesamlphp/config/
- /opt/simplesaml/metadata/:/simplesamlphp/metadata/
# Module/Theme folder
#- /opt/simplesaml/MyModule/:/simplesamlphp/modules/MyModule/
ports:
- 8080:80
- 8443:443
Content type
Image
Digest
sha256:b89e45c70…
Size
262.6 MB
Last updated
12 months ago
docker pull vviudez/ssp-idp