SSO using SAML in temporal UI (self hosted)

Community Support
,
1

Hey is it possible to enable SSO using SAML Autentication on temporal UI(Self hosted) ?
If yes? what’s the process?
I have gone through the documentation, but couldn’t find anything.

2

Can someone respond please.

3

Hi,
sorry, you should be able to configure it through env variables documentation/docs/references/web-ui-environment-variables.mdx at ddf0258aa9730c8ff845b7bc17f9bb7529e97253 · temporalio/documentation · GitHub

Antonio

4

The doc which you have shared is referring to OIDC protocol right?
not SAML, Can you please confirm.

Our own inhouse IDP supports only SAML protocol. So we need to know if temporal supports SSO using SAML or not..

5

We are using Azure to authenticate the Temporal UI.

  temporal-ui:
    container_name: temporal-ui
    depends_on:
      - temporal
    environment:
  .......
      - "TEMPORAL_AUTH_ENABLED=true"
      - "TEMPORAL_AUTH_LABEL=Sign in with SSO"
      - "TEMPORAL_AUTH_PROVIDER_URL=${TEMPORAL_AUTH_PROVIDER_URL}"
      - "TEMPORAL_AUTH_ISSUER_URL=${TEMPORAL_AUTH_ISSUER_URL}"
      - "TEMPORAL_AUTH_CLIENT_ID=${TEMPORAL_AUTH_CLIENT_ID}"
      - "TEMPORAL_AUTH_CLIENT_SECRET=${TEMPORAL_AUTH_CLIENT_SECRET}"
      - "TEMPORAL_AUTH_CALLBACK_URL=https://${TEMPORAL_HOST_NAME}/auth/sso/callback"
      - "TEMPORAL_AUTH_SCOPES=${TEMPORAL_AUTH_SCOPES}"
    image: temporalio/ui:${TEMPORAL_UI_VERSION}
6

Hey hi @Tate_Jones what ever you have achieved using azure is great. But Azure is not a protocol right? Azure is an Identity provider (IDP) which can accept both SAMl and OIDC protocal’s.

But ours is a large enterprise and we have our own in house built Identity provider(IDP). But the IDP which we built only can support SAML protocol as of now.

So, I want to understand if temporal can really support SSO using SAML protocol for self hosted servers?

7

Hi @antonio.perez can you please clarify here..
Thanks.

8

Hi,

Rechecking again, Does Temporal UI support SSO using SAML?