| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196 |
- <form action="/_api/admin/security/passport-saml" method="post" class="form-horizontal passportStrategy" id="samlSetting" role="form"
- {% if isRestartingServerNeeded %}style="opacity: 0.4;"{% endif %}>
- <legend class="alert-anchor">{{ t("security_setting.SAML.name") }} {{ t("security_setting.configuration") }}</legend>
- {% set nameForIsSamlEnabled = "settingForm[security:passport-saml:isEnabled]" %}
- {% set isSamlEnabled = settingForm['security:passport-saml:isEnabled'] %}
- <div class="form-group">
- <label for="{{nameForIsSamlEnabled}}" class="col-xs-3 control-label">{{ t("security_setting.SAML.name") }}</label>
- <div class="col-xs-6">
- <div class="btn-group btn-toggle" data-toggle="buttons">
- <label class="btn btn-default btn-rounded btn-outline {% if isSamlEnabled %}active{% endif %}" data-active-class="primary">
- <input name="{{nameForIsSamlEnabled}}" value="true" type="radio"
- {% if true === isSamlEnabled %}checked{% endif %}> ON
- </label>
- <label class="btn btn-default btn-rounded btn-outline {% if !isSamlEnabled %}active{% endif %}" data-active-class="default">
- <input name="{{nameForIsSamlEnabled}}" value="false" type="radio"
- {% if !isSamlEnabled %}checked{% endif %}> OFF
- </label>
- </div>
- </div>
- </div>
- <fieldset id="passport-saml-hide-when-disabled" {%if !isSamlEnabled %}style="display: none;"{% endif %}>
- <div class="form-group">
- <label for="settingForm[security:passport-saml:entryPoint]" class="col-xs-3 control-label">{{ t("security_setting.SAML.entry_point") }}</label>
- <div class="col-xs-6">
- <input class="form-control" type="text" name="settingForm[security:passport-saml:entryPoint]" value="{{ settingForm['security:passport-saml:entryPoint'] || '' }}">
- <p class="help-block">
- <small>
- {{ t("security_setting.Use env var if empty", "SAML_ENTRY_POINT") }}
- </small>
- </p>
- </div>
- </div>
- <div class="form-group">
- <label class="col-xs-3 control-label">{{ t("security_setting.callback_URL") }}</label>
- <div class="col-xs-6">
- <input class="form-control" type="text" value="{% if settingForm['app:siteUrl'] %}{{ settingForm['app:siteUrl'] }}{% else %}[INVALID] {% endif %}/passport/saml/callback" readonly>
- <p class="help-block small">{{ t("security_setting.desc_of_callback_URL", 'SAML Identity') }}</p>
- {% if !settingForm['app:siteUrl'] %}
- <div class="alert alert-danger">
- <i class="icon-exclamation"></i> {{ t("security_setting.alert_siteUrl_is_not_set", '<a href="/admin/app">' + t('App settings') + '<i class="icon-login"></i></a>') }}
- </div>
- {% endif %}
- </div>
- </div>
- <div class="form-group">
- <label for="settingForm[security:passport-saml:issuer]" class="col-xs-3 control-label">{{ t("security_setting.SAML.issuer") }}</label>
- <div class="col-xs-6">
- <input class="form-control" type="text" name="settingForm[security:passport-saml:issuer]" value="{{ settingForm['security:passport-saml:issuer'] || '' }}">
- <p class="help-block">
- <small>
- {{ t("security_setting.Use env var if empty", "SAML_ISSUER") }}
- </small>
- </p>
- </div>
- </div>
- <h4>Attribute Mapping</h4>
- <div class="form-group">
- <label for="settingForm[security:passport-saml:attrMapId]" class="col-xs-3 control-label">Identifier</label>
- <div class="col-xs-6">
- <input class="form-control" type="text"
- name="settingForm[security:passport-saml:attrMapId]" value="{{ settingForm['security:passport-saml:attrMapId'] || '' }}">
- <p class="help-block">
- <small>
- {{ t("security_setting.SAML.id_detail") }}
- </small>
- </p>
- </div>
- </div>
- <div class="form-group">
- <label for="settingForm[security:passport-saml:attrMapUsername]" class="col-xs-3 control-label">Username</label>
- <div class="col-xs-6">
- <input class="form-control" type="text"
- name="settingForm[security:passport-saml:attrMapUsername]" value="{{ settingForm['security:passport-saml:attrMapUsername'] || '' }}">
- <p class="help-block">
- <small>
- {{ t("security_setting.SAML.username_detail") }}
- </small>
- </p>
- </div>
- </div>
- <div class="form-group">
- <div class="col-xs-6 col-xs-offset-3">
- <div class="checkbox checkbox-info">
- <input type="checkbox" id="bindByUserName-SAML" name="settingForm[security:passport-saml:isSameUsernameTreatedAsIdenticalUser]" value="1"
- {% if settingForm['security:passport-saml:isSameUsernameTreatedAsIdenticalUser'] %}checked{% endif %} />
- <label for="bindByUserName-SAML">
- {{ t("security_setting.Treat username matching as identical", "username") }}
- </label>
- <p class="help-block">
- <small>
- {{ t("security_setting.Treat username matching as identical_warn", "username") }}
- </small>
- </p>
- </div>
- </div>
- </div>
- <div class="form-group">
- <label for="settingForm[security:passport-saml:attrMapMail]" class="col-xs-3 control-label">Mail</label>
- <div class="col-xs-6">
- <input class="form-control" type="text"
- name="settingForm[security:passport-saml:attrMapMail]" value="{{ settingForm['security:passport-saml:attrMapMail'] || '' }}">
- <p class="help-block">
- <small>
- {{ t("security_setting.SAML.mapping_detail", t("Email")) }}
- </small>
- </p>
- </div>
- </div>
- <div class="form-group">
- <label for="settingForm[security:passport-saml:attrMapFirstName]" class="col-xs-3 control-label">{{ t("security_setting.SAML.First Name") }}</label>
- <div class="col-xs-6">
- <input class="form-control" type="text" placeholder="Default: firstName"
- name="settingForm[security:passport-saml:attrMapFirstName]" value="{{ settingForm['security:passport-saml:attrMapFirstName'] || '' }}">
- <p class="help-block">
- <small>
- {{ t("security_setting.SAML.mapping_detail", t("security_setting.SAML.First Name")) }}
- </small>
- </p>
- </div>
- </div>
- <div class="form-group">
- <label for="settingForm[security:passport-saml:attrMapLastName]" class="col-xs-3 control-label">{{ t("security_setting.SAML.Last Name") }}</label>
- <div class="col-xs-6">
- <input class="form-control" type="text" placeholder="Default: lastName"
- name="settingForm[security:passport-saml:attrMapLastName]" value="{{ settingForm['security:passport-saml:attrMapLastName'] || '' }}">
- <p class="help-block">
- <small>
- {{ t("security_setting.SAML.mapping_detail", t("security_setting.SAML.Last Name")) }}
- </small>
- </p>
- </div>
- </div>
- <h4>Options</h4>
- <div class="form-group">
- <label for="settingForm[security:passport-saml:cert]" class="col-xs-3 control-label">Certificate</label>
- <div class="col-xs-6">
- <textarea class="form-control input-sm" type="text" rows="5" name="settingForm[security:passport-saml:cert]">{{ settingForm['security:passport-saml:cert'] || '' }}</textarea>
- <p class="help-block">
- <small>
- {{ t("security_setting.SAML.cert_detail1") }}<br>
- {{ t("security_setting.SAML.cert_detail2") }}
- </small>
- </p>
- <p>
- <small>
- e.g.
- <pre>-----BEGIN CERTIFICATE-----
- MIICBzCCAXACCQD4US7+0A/b/zANBgkqhkiG9w0BAQsFADBIMQswCQYDVQQGEwJK
- UDEOMAwGA1UECAwFVG9reW8xFTATBgNVBAoMDFdFU0VFSywgSW5jLjESMBAGA1UE
- ...
- crmVwBzbloUO2l6k1ibwD2WVwpdxMKIF5z58HfKAvxZAzCHE7kMEZr1ge30WRXQA
- pWVdnzS1VCO8fKsJ7YYIr+JmHvseph3kFUOI5RqkCcMZlKUv83aUThsTHw==
- -----END CERTIFICATE-----</pre>
- </small>
- </p>
- </div>
- </div>
- </fieldset>
- <div class="form-group" id="btn-update">
- <div class="col-xs-offset-3 col-xs-6">
- <input type="hidden" name="_csrf" value="{{ csrf() }}">
- <button type="submit" class="btn btn-primary">{{ t('Update') }}</button>
- </div>
- </div>
- </form>
- <script>
- $('input[name="settingForm[security:passport-saml:isEnabled]"]').change(function() {
- const isEnabled = ($(this).val() === "true");
- if (isEnabled) {
- $('#passport-saml-hide-when-disabled').show(400);
- }
- else {
- $('#passport-saml-hide-when-disabled').hide(400);
- }
- });
- </script>
|