README

SAML Identity Provider for Craft CMS

Turn a Craft CMS site into a SAML 2.0 Identity Provider: your Craft users sign in to other applications (service providers), including other Craft sites running SAML SP.

• Service-provider- and IdP-initiated SSO
• Signed and encrypted responses and assertions
• Per-provider attribute mapping and access control by user group
• Single Logout

Read the documentation →

Requirements

• Craft CMS 5.10.8+
• PHP 8.2+

Installation

Install from the Craft Plugin Store, or with Composer:

composer require flipboxfactory/saml-idp
php craft plugin/install saml-idp

If Composer reports a webmozart/assert conflict, re-run the composer require with -W (saml2 4.19.x needs webmozart/assert 1.x).

Development

Checks follow Craft's coding guidelines: craftcms/ecs and craftcms/phpstan. Tests use Codeception with Craft's test module and need a MySQL database:

docker run -d --rm --name saml-idp-test-mysql -e MYSQL_ROOT_PASSWORD=password \
  -e MYSQL_DATABASE=saml_idp_test -p 127.0.0.1:3306:3306 mysql:8.0
cp tests/.env.example tests/.env   # adjust CRAFT_DB_* if needed

composer check           # check-cs + phpstan + test
composer test-coverage   # needs pcov or Xdebug; CI requires 85% line coverage
composer fix-cs          # auto-fix coding standards

CI runs the same checks on every push and pull request. Documentation lives in docs/ and is published from master.

Security

Please report vulnerabilities privately to support@flipboxfactory.com rather than opening a public issue.

Contributing

See CONTRIBUTING.

Credits

• Flipbox Digital
• garycrane

License

See LICENSE.