SAML 2.0

Not supported yet in 1.6.3

The admin portal has a settings page for SAML 2.0 / eIDAS under Identity Providers. Leave Enable SAML 2.0 Sign-in switched off until this page says SAML is supported.

Status in 1.6.3

• Responses are checked. From 1.6.3, Eurion only accepts SAML responses that are signed with the provider's certificate, are intended for your Eurion server, are within their validity period and (when sign-in starts in Eurion) belong to a sign-in that Eurion itself started. A response can only be used once.
• No certificate, no sign-in. If no certificate is stored, SAML sign-in answers that the service is not available.
• Not tested against a real provider. The checks have been tested with test keys, but not yet against Microsoft Entra ID, ADFS or an eIDAS node. Once that is done, this page will describe how to set it up.

Use for now

• Microsoft Entra ID (OpenID Connect), which also works for organisations that synchronise their on-premises Active Directory to Entra ID, or
• sign-in with e-mail and password in Eurion.

See Versions for what changed in each version.