Repository files navigation

Built on top ofGrape API framework andGoliath web server, this tiny API serves Discourse SSO protocol and talks with SAML2 authentication endpoints.

You should point your Discourse instance to SSO API athttps://<host-with-this-API.com>/login, and set the proper SAML endpoint data inconfig/production.rb (requires restart). Everything else will be handled automatically. The configuration options are rather limited at the moment, but should be pretty self-descriptory.

You can have a look at the attachednginx.conf.example and systemd template unitsaml_auth_proxy@.service.example.With that template unit you can launch multiple instances of a API server, and then use them all in your nginxupstream directive.