weseek__growi/src/server/views/admin/widget/passport/saml.html

<form action="/_api/admin/security/passport-saml" method="post" class="form-horizontal passportStrategy" id="samlSetting" role="form"
    {% if isRestartingServerNeeded %}style="opacity: 0.4;"{% endif %}>
  <legend class="alert-anchor">{{ t("security_setting.SAML.name") }} {{ t("security_setting.configuration") }}</legend>

  {% set nameForIsSamlEnabled = "settingForm[security:passport-saml:isEnabled]" %}
  {% set isSamlEnabled = getConfig('crowi', 'security:passport-saml:isEnabled') %}

  <style>
    .authentication-settings-table {
      table-layout: fixed;
    }

    .authentication-settings-table .item-name{
      width: 150px;
    }

    .authentication-settings-table.use-only-env-vars .from-env-vars {
      background-color: rgba(0, 159, 187, 0.1);
    }
  </style>

  <div class="form-group">
    <label class="col-xs-3 control-label">{{ t("security_setting.SAML.name") }}</label>
    <div class="col-xs-6">
      <div class="btn-group btn-toggle" data-toggle="buttons">
        <label class="btn btn-default btn-rounded btn-outline {% if isSamlEnabled %}active{% endif %}" data-active-class="primary">
          <input name="{{nameForIsSamlEnabled}}" value="true" type="radio"
              {% if true === isSamlEnabled %}checked{% endif %}> ON
        </label>
        <label class="btn btn-default btn-rounded btn-outline {% if !isSamlEnabled %}active{% endif %}" data-active-class="default">
          <input name="{{nameForIsSamlEnabled}}" value="false" type="radio"
              {% if !isSamlEnabled %}checked{% endif %}> OFF
        </label>
      </div>
    </div>
  </div>

  <div class="form-group">
    <label class="col-xs-3 control-label">{{ t("security_setting.callback_URL") }}</label>
    <div class="col-xs-6">
      <input class="form-control"
             type="text"
             value="{% if settingForm['app:siteUrl'] %}{{ settingForm['app:siteUrl'] }}{% else %}[INVALID] {% endif %}/passport/saml/callback"
             readonly>
      <p class="help-block small">{{ t("security_setting.desc_of_callback_URL", 'SAML Identity') }}</p>
      {% if !settingForm['app:siteUrl'] %}
      <div class="alert alert-danger">
        <i class="icon-exclamation"></i> {{ t("security_setting.alert_siteUrl_is_not_set", '<a href="/admin/app">' + t('App settings') + '<i class="icon-login"></i></a>') }}
      </div>
      {% endif %}
    </div>
  </div>

  <fieldset id="passport-saml-hide-when-disabled" {%if !isSamlEnabled %}style="display: none;"{% endif %}>

    <h4>Basic Settings</h4>
    <table class="table authentication-settings-table">
      <colgroup>
        <col class="item-name">
        <col class="from-db">
        <col class="from-env-vars">
      </colgroup>
      <thead>
        <tr><th></th><th>Database</th><th>Environment variables</th></tr>
      </thead>
      <tbody>
        <tr>
          <th>{{ t("security_setting.SAML.entry_point") }}</th>
          <td>
            <input class="form-control"
                   type="text"
                   name="settingForm[security:passport-saml:entryPoint]"
                   value="{{ getConfigFromDB('crowi', 'security:passport-saml:entryPoint') || '' }}">
            <p class="help-block">
              <small>
                {{ t("security_setting.Use env var if empty", "SAML_ENTRY_POINT") }}
              </small>
            </p>
          </td>
          <td>
            <input class="form-control"
                   type="text"
                   value="{{ getConfigFromEnvVars('crowi', 'security:passport-saml:entryPoint') || '' }}"
                   readonly>
          </td>
        </tr>
        <tr>
          <th>{{ t("security_setting.SAML.issuer") }}</th>
          <td>
            <input class="form-control"
                   type="text"
                   name="settingForm[security:passport-saml:issuer]"
                   value="{{ getConfigFromDB('crowi', 'security:passport-saml:issuer') || '' }}">
            <p class="help-block">
              <small>
                {{ t("security_setting.Use env var if empty", "SAML_ISSUER") }}
              </small>
            </p>
          </td>
          <td>
            <input class="form-control"
                   type="text"
                   value="{{ getConfigFromEnvVars('crowi', 'security:passport-saml:issuer') || '' }}"
                   readonly>
          </td>
        </tr>
      </tbody>
    </table>

    <h4>Attribute Mapping</h4>

    <table class="table authentication-settings-table">
      <colgroup>
        <col class="item-name">
        <col class="from-db">
        <col class="from-env-vars">
      </colgroup>
      <thead>
        <tr><th></th><th>Database</th><th>Environment variables</th></tr>
      </thead>
      <tbody>
      <tr>
        <th>Identifier</th>
        <td>
          <input class="form-control"
                 type="text"
                 name="settingForm[security:passport-saml:attrMapId]"
                 value="{{ getConfigFromDB('security:passport-saml:attrMapId') || '' }}">
          <p class="help-block">
            <small>
              {{ t("security_setting.SAML.id_detail") }}
            </small>
          </p>
        </td>
        <td>
          <input class="form-control"
                 type="text"
                 value="{{ getConfigFromEnvVars('security:passport-saml:attrMapId') || '' }}"
                 readonly>
        </td>
      </tr>
      <tr>
        <th>Username</th>
        <td>
          <input class="form-control"
                 type="text"
                 name="settingForm[security:passport-saml:attrMapUsername]"
                 value="{{ getConfigFromDB('security:passport-saml:attrMapUsername') || '' }}">
          <p class="help-block">
            <small>
              {{ t("security_setting.SAML.username_detail") }}
            </small>
          </p>
        </td>
        <td>
          <input class="form-control"
                 type="text"
                 value="{{ getConfigFromEnvVars('security:passport-saml:attrMapUsername') || '' }}"
                 readonly>
        </td>
      </tr>
      <tr>
        <th>Mail</th>
        <td>
          <input class="form-control"
                 type="text"
                 name="settingForm[security:passport-saml:attrMapMail]"
                 value="{{ getConfigFromDB('security:passport-saml:attrMapMail') || '' }}">
          <p class="help-block">
            <small>
              {{ t("security_setting.SAML.mapping_detail", t("Email")) }}
            </small>
        </td>
        <td>
          <input class="form-control"
                 type="text"
                 value="{{ getConfigFromEnvVars('security:passport-saml:attrMapMail') || '' }}"
                 readonly>
        </td>
      </tr>
      <tr>
        <th>{{ t("security_setting.SAML.First Name") }}</th>
        <td>
          <input class="form-control"
                 type="text"
                 placeholder="Default: firstName"
                 name="settingForm[security:passport-saml:attrMapFirstName]"
                 value="{{ getConfigFromDB('security:passport-saml:attrMapFirstName') || '' }}">
          <p class="help-block">
            <small>
              {{ t("security_setting.SAML.mapping_detail", t("security_setting.SAML.First Name")) }}
            </small>
          </p>
        </td>
        <td>
          <input class="form-control"
                 type="text"
                 value="{{ getConfigFromEnvVars('security:passport-saml:attrMapFirstName') || '' }}"
                 readonly>
        </td>
      </tr>
      <tr>
        <th>{{ t("security_setting.SAML.Last Name") }}</th>
        <td>
          <input class="form-control"
                 type="text"
                 placeholder="Default: lastName"
                 name="settingForm[security:passport-saml:attrMapLastName]"
                 value="{{　getConfigFromDB('security:passport-saml:attrMapLastName') || '' }}">
          <p class="help-block">
            <small>
              {{ t("security_setting.SAML.mapping_detail", t("security_setting.SAML.Last Name")) }}
            </small>
          </p>
        </td>
        <td>
          <input class="form-control"
                 type="text"
                 value="{{　getConfigFromEnvVars('security:passport-saml:attrMapLastName') || '' }}"
                 readonly>
        </td>
      </tr>
      </tbody>
    </table>

    <h4>Attribute Mapping Options</h4>

    <div class="form-group">
      <div class="col-xs-offset-1">
        <div class="checkbox checkbox-info">
          <input id="bindByUserName-SAML"
                 type="checkbox"
                 name="settingForm[security:passport-saml:isSameUsernameTreatedAsIdenticalUser]"
                 value="1"
                 {% if settingForm['security:passport-saml:isSameUsernameTreatedAsIdenticalUser'] %}checked{% endif %} />
          <label for="bindByUserName-SAML">
            {{ t("security_setting.Treat username matching as identical", "username") }}
          </label>
          <p class="help-block">
            <small>
              {{ t("security_setting.Treat username matching as identical_warn", "username") }}
            </small>
          </p>
        </div>
      </div>
    </div>

    <div class="form-group">
      <div class="col-xs-offset-1">
        <div class="checkbox checkbox-info">
          <input id="bindByEmail-SAML"
                 type="checkbox"
                 name="settingForm[security:passport-saml:isSameEmailTreatedAsIdenticalUser]"
                 value="1"
                 {% if settingForm['security:passport-saml:isSameEmailTreatedAsIdenticalUser'] %}checked{% endif %} />
          <label for="bindByEmail-SAML">
            {{ t("security_setting.Treat email matching as identical", "email") }}
          </label>
          <p class="help-block">
            <small>
              {{ t("security_setting.Treat email matching as identical_warn", "email") }}
            </small>
          </p>
        </div>
      </div>
    </div>

    <h4>Options</h4>

    <table class="table authentication-settings-table">
      <colgroup>
        <col class="item-name">
        <col class="from-db">
        <col class="from-env-vars">
      </colgroup>
      <thead>
        <tr><th></th><th>Database</th><th>Environment variables</th></tr>
      </thead>
      <tbody>
        <tr>
          <th>Certificate</th>
          <td>
            <textarea class="form-control input-sm"
                       type="text"
                       rows="5"
                       name="settingForm[security:passport-saml:cert]"
            >{{ getConfigFromDB('security:passport-saml:cert') || '' }}</textarea>
            <p class="help-block">
              <small>
                {{ t("security_setting.SAML.cert_detail1") }}<br>
                {{ t("security_setting.SAML.cert_detail2") }}
              </small>
            </p>
            <p>
              <small>
                e.g.
                <pre>-----BEGIN CERTIFICATE-----
MIICBzCCAXACCQD4US7+0A/b/zANBgkqhkiG9w0BAQsFADBIMQswCQYDVQQGEwJK
UDEOMAwGA1UECAwFVG9reW8xFTATBgNVBAoMDFdFU0VFSywgSW5jLjESMBAGA1UE
...
crmVwBzbloUO2l6k1ibwD2WVwpdxMKIF5z58HfKAvxZAzCHE7kMEZr1ge30WRXQA
pWVdnzS1VCO8fKsJ7YYIr+JmHvseph3kFUOI5RqkCcMZlKUv83aUThsTHw==
-----END CERTIFICATE-----</pre>
              </small>
            </p>
          </td>
          <td>
             <textarea class="form-control input-sm"
                       type="text"
                       rows="5"
                       readonly>
               {{ getConfigFromEnvVars('security:passport-saml:cert') || '' }}
             </textarea>
          </td>
        </tr>
      </tbody>
    </table>

  </fieldset>

  <div class="form-group" id="btn-update">
    <div class="col-xs-offset-3 col-xs-6">
      <input type="hidden" name="_csrf" value="{{ csrf() }}">
      <button type="submit" class="btn btn-primary">{{ t('Update') }}</button>
    </div>
  </div>

</form>

<script>
  $('input[name="settingForm[security:passport-saml:isEnabled]"]').change(function() {
    const isEnabled = ($(this).val() === "true");

    if (isEnabled) {
      $('#passport-saml-hide-when-disabled').show(400);
    }
    else {
      $('#passport-saml-hide-when-disabled').hide(400);
    }
  });
</script>