SAML authentication between G suite and suitecrm not working

📦 Install & Upgrade Help
1

HI dear,
After upgrading to latest version my SAML authentication between G suite and SuiteCRM not working. i even installed fresh station there is also not working. Is it no more available in suiteCRM ?

2

I’d really appreciate a short or long introduction to how to use SAML at all? We also use Google and it would be great to allow single signon via google.

3

Was there any ever resolution to this? Not having SAML working with Google is a blocker for us moving forward. Thanks, all.

4

Hi,
we are using the suiteCRM version 7.8.6 and, after some fix, now the SAML authentication with GSuite works fine!

In particular we had to update to the newest php-saml library.

you can download it here:
https://github.com/onelogin/php-saml/releases

(in our case we have used the version v2.11.0)

and substitute it in the following path
“/modules/Users/authentication/SAML2Authenticate/lib/onelogin/php-saml/”

The issue is described here:
https://github.com/salesagility/SuiteCRM/issues/3270
and here:
https://github.com/onelogin/php-saml/pull/218

Moreover be careful with the “Entity id” field in the Service Provider Details window. ( see https://support.google.com/a/answer/6087519) “ACS URL” and “Entity ID” must be the same and with this format.

“ACS URL” = “https://<your_suitecrm_path/index.php?action=Login&module=Users”
“Entity ID” = “https://<your_suitecrm_path/index.php?action=Login&module=Users”

At the last, after the activation of SAML authentication. we could needed to logged in with first administration user.
Try adding the parameter no_saml in the suitecrm url .

 https://<your_sitecrm_path/index.php?action=Login&module=Users&no_saml=true

I hope this can help someone.

Sandro

1 Like