Date: Sat, 29 Mar 2025 11:09:04 +0000 (UTC)
From: Viktor Madarasz <viktor.madarasz@yahoo.com>
To: 
	"pgadmin-support@lists.postgresql.org" <pgadmin-support@lists.postgresql.org>
Message-ID: <1224057069.3389211.1743246544267@mail.yahoo.com>
Subject: Pgadmin4 Webserver Authentication + Azure SAML SSO , anyone ever
 managed to configure it?
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_Part_3389210_317813081.1743246544266"
References: <1224057069.3389211.1743246544267.ref@mail.yahoo.com>
Content-Length: 2018
Archived-At: 
 <https://www.postgresql.org/message-id/1224057069.3389211.1743246544267%40mail.yahoo.com>
Precedence: bulk

------=_Part_3389210_317813081.1743246544266
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hi

Pgadmin4 Webserver Authentication + Azure SAML SSO , anyone ever managed to=
 configure it?

Trying to switch IdP Provider from Onelogin ( working right now with Pgadmi=
n4 + Webserver Authentication + Onelogin as IdP provider=C2=A0 to Azure SAM=
L SSO.

It looks like the mapped attributes might be the one causing the issue comi=
ng from Azure side.

The username in a form of firstname.lastname@domain.com gets parsed correct=
ly but the actual group memberships not being passed along and therefore us=
ers being logged in with read only profiles and it does not respect their g=
roup memberships.
Regards

Viktor


------=_Part_3389210_317813081.1743246544266
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<html><head></head><body><div class=3D"yahoo-style-wrap" style=3D"font-fami=
ly:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:10px;"><div dir=
=3D"ltr" data-setdir=3D"false"><font size=3D"3">Hi<br><br><span>Pgadmin4 We=
bserver Authentication + Azure SAML SSO , anyone ever managed to configure =
it?<br><br>Trying to switch IdP Provider from Onelogin ( working right now =
with Pgadmin4 + Webserver Authentication + Onelogin as IdP provider&nbsp; t=
o Azure SAML SSO.<br><br>It looks like the mapped attributes might be the o=
ne causing the issue coming from Azure side.<br><br>The username in a form =
of firstname.lastname@domain.com gets parsed correctly but the actual group=
 memberships not being passed along and therefore users being logged in wit=
h read only profiles and it does not respect their group memberships.</span=
></font></div><div dir=3D"ltr" data-setdir=3D"false"><font size=3D"3"><span=
><br></span></font></div><div dir=3D"ltr" data-setdir=3D"false"><font size=
=3D"3"><span>Regards<br><br>Viktor<br></span><br></font><br></div></div></b=
ody></html>
------=_Part_3389210_317813081.1743246544266--