Hacker News Reader

Comment by nickmyersdt | Hacker News Reader

If anyone knows an identity solution that supports bilateral and multilateral saml (federation of identity providers), automatic retrieval of metadata/certs, Oauth, Oidc, group rules, IDP discovery (routing to IDP based on identifier), wayfless, and IP Authentication I would love to hear about it. We run a B2B that sells our web based service into education (primary to through to university) and have a small team so are always interested in solutions in this space.

View on HN

We (FusionAuth) cover most of this. I think we do bilateral and multilateral SAML. More details in our docs: https://fusionauth.io/docs/v1/tech/core-concepts/integration...

We do OAuth, OIDC, and idp routing based on domain or id. We track ips and have the ability (in the Enterprise tier) to add IP ACLs, but I am not sure what you mean by IP authentication.

I am not sure what you mean by wayfless, not familiar with that term.

Feel free to reach out to me for more info if you'd like to chat, my contact info is in my profile.

Hi mooreds, would love to get access to a FusionAuth account where we could set up and test your SAML identity provider (would also help us build an instructions guide for FusionAuth customers). Could you make this happen?

Hi deepakprab,

You can download and run the community version in a variety of formats. For testing you could spin up an ec2 instance if you'd like.

Download it here: https://fusionauth.io/download

If you want us to manage it, you can sign up for a basic cloud here: https://fusionauth.io/pricing

Let me know if you have questions.

Amazing, thank you. I'll definitely reach out if I have any questions.

Keycloak does a good bit of this and is open source. It's an outstanding project. It's my go-to for anything that requires login, especially for its SAML/OIDC support.

Great question, I would think Shibboleth might cover some of the topics you are looking for. I am not too experienced with the education sector, would love to chat further to get a better understanding.

I work in education, Shibboleth is indeed what we use for these types of things. You go through the shib portal and depending on your email address get redirected to your institutions SAML login and back.

Somewhat similar to using Azure or Okta B2B integration, but with support for things that don't support native SAML and older legacy platforms that we just can't kill.

I'd love to chat with you about this, but you don't have contact info listed in your HN profile. Can you send me a note?

Reply on news.ycombinator.com