# Feature - Portals and Authentication

**URL:** https://discussions.eramba.org/t/feature-portals-and-authentication/1675
**Category:** Forum - Software
**Created:** [September 21, 2020, 10:14am UTC](https://discussions.eramba.org/t/feature-portals-and-authentication/1675 "2020-09-21T10:14:02Z")
**Posts on this page:** 9
**Page:** 1

<div class="post-metadata">

### Author: ![jonas.von.scholten](https://discussions.eramba.org/user_avatar/discussions.eramba.org/jonas.von.scholten/32/349_2.png) [@jonas.von.scholten](https://discussions.eramba.org/u/jonas.von.scholten)
#### Post date: [September 21, 2020, 10:14am UTC](https://discussions.eramba.org/t/feature-portals-and-authentication/1675/1 "2020-09-21T10:14:03Z")

</div>

Suggest to update all portals to allow for SAML/OAuth.  
More and more businesses rely on Cloud enabled accounts (Google/AzureAD/Github etc).

since LDAP is not supported in cloud environments, without implementing makeshift workarounds, these modules are not available to organizations leveraging cloud identities.

Group memberships would most likely have to be maintained within eramba …

just a thought.

---

<div class="post-metadata">

### Author: ![eramba](https://discussions.eramba.org/letter_avatar_proxy/v4/letter/e/c6cbf5/32.png) [@eramba](https://discussions.eramba.org/u/eramba)
#### Post date: [September 21, 2020, 7:57pm UTC](https://discussions.eramba.org/t/feature-portals-and-authentication/1675/2 "2020-09-21T19:57:08Z")

</div>

hello jonas!! our forum is reminding me you have been quiet for a long time!

 ![image](https://discussions.eramba.org/uploads/default/original/2X/7/71ab3042b7e08e2635f582b266679560658cc772.png)

all portals (except awareness which needs ldap to sync users) support ldap/saml .. which one did not work for you?

regards!!

---

<div class="post-metadata">

### Author: ![jonas.von.scholten](https://discussions.eramba.org/user_avatar/discussions.eramba.org/jonas.von.scholten/32/349_2.png) [@jonas.von.scholten](https://discussions.eramba.org/u/jonas.von.scholten)
#### Post date: [September 21, 2020, 8:29pm UTC](https://discussions.eramba.org/t/feature-portals-and-authentication/1675/3 "2020-09-21T20:29:43Z")

</div>

Hey 🙂

Yes i’ve had a few changes in jobs in the mean time - just started using eramba again for my new position.

The portals in question are the awareness and policy ones.  
The solution is exposed to the internet so exposing policies without login is not an option - neither is LDAP unfortunately.

but it’s great to be back 😉

Kind regards

---

<div class="post-metadata">

### Author: ![jonas.von.scholten](https://discussions.eramba.org/user_avatar/discussions.eramba.org/jonas.von.scholten/32/349_2.png) [@jonas.von.scholten](https://discussions.eramba.org/u/jonas.von.scholten)
#### Post date: [October 5, 2020, 10:35am UTC](https://discussions.eramba.org/t/feature-portals-and-authentication/1675/4 "2020-10-05T10:35:47Z")

</div>

Are there any plans to enable Oauth/SAML on Policy and awareness portals ?

---

<div class="post-metadata">

### Author: ![eramba](https://discussions.eramba.org/letter_avatar_proxy/v4/letter/e/c6cbf5/32.png) [@eramba](https://discussions.eramba.org/u/eramba)
#### Post date: [October 8, 2020, 10:43am UTC](https://discussions.eramba.org/t/feature-portals-and-authentication/1675/5 "2020-10-08T10:43:02Z")

</div>

the awareness module must use ldap, no other way around as its deeply rooted in that technology. in the case of policy portal, when group authorization is not used on any of the policies it could use SAML…that requires a logic:

on system / settings / authentication / policy portal … you could only enable saml/oauth (as inherited from the main authentication) if no existing policy has “group authorization” as a setting, otherwise this option is simply not possible.

int ref: [https://github.com/eramba/eramba\_v2/issues/2757](https://github.com/eramba/eramba_v2/issues/2757)  
int ref: [https://eramba.zendesk.com/agent/tickets/10534](https://eramba.zendesk.com/agent/tickets/10534)

---

<div class="post-metadata">

### Author: ![pbilz](https://discussions.eramba.org/letter_avatar_proxy/v4/letter/p/e68b1a/32.png) [@pbilz](https://discussions.eramba.org/u/pbilz)
#### Post date: [March 31, 2021, 10:57am UTC](https://discussions.eramba.org/t/feature-portals-and-authentication/1675/6 "2021-03-31T10:57:24Z")

</div>

To revive an old thread, has anyone successfully configured SAML auth for the Policy portal?

Under settings \> authentication \> policy, all I can see is my LDAP connector. I do have SAML (OKTA) configured and working for the Main portal.

 ![image](https://discussions.eramba.org/uploads/default/original/2X/8/8bc7709ed64d205b479df3f4b8272ca8c61b5c90.png)

For my policy item itself, Policy Portal Permission is set to LDAP Auth required and Enable Specific Groups disabled.

I only have the Main portal and Policy portal enabled.

---

<div class="post-metadata">

### Author: ![sam](https://discussions.eramba.org/letter_avatar_proxy/v4/letter/s/5f9b8f/32.png) [@sam](https://discussions.eramba.org/u/sam)
#### Post date: [March 31, 2021, 11:24am UTC](https://discussions.eramba.org/t/feature-portals-and-authentication/1675/7 "2021-03-31T11:24:13Z")

</div>

This feature was not yet implemented.

---

<div class="post-metadata">

### Author: ![Rick](https://discussions.eramba.org/letter_avatar_proxy/v4/letter/r/9f8e36/32.png) [@Rick](https://discussions.eramba.org/u/Rick)
#### Post date: [April 6, 2021, 5:11pm UTC](https://discussions.eramba.org/t/feature-portals-and-authentication/1675/8 "2021-04-06T17:11:49Z")

</div>

I would like to request that any portal that supports SAML and is enabled be added to the metadata ( **md:AssertionConsumerService** ) that is generated at http[s]://servernamehere/samlConnectors/getMetadata

This could be the default or Configuration options to enable for each portal.

This would allow SAML IDPs to automatically pull the metadata and not rely on static content.

---

<div class="post-metadata">

### Author: ![sam](https://discussions.eramba.org/letter_avatar_proxy/v4/letter/s/5f9b8f/32.png) [@sam](https://discussions.eramba.org/u/sam)
#### Post date: [August 12, 2024, 1:50pm UTC](https://discussions.eramba.org/t/feature-portals-and-authentication/1675/9 "2024-08-12T13:50:24Z")

</div>


