RFE : Allow token generation in the UI and for SAML Users

post by aldric.berges1 on Sep 30, 2020

Aldric Berges
aldric.berges1

Hello,

We migrated to SAML authentication In IQServer. ( SSO handled via a keycloak instance )

All is working fine except for IDE plugins and IQServer API.

SAML users are known at Keycloak level only which require a login redirect, hence we are no more able to use IDE plugins and IQServer API.

One common solution to this type of problem is to use tokens :

1. The developer connect to the UI with it’s SAML account
2. They generate a token from the IQServer UI
3. They use the token in plugins of its favorite IDE or API.

However, it’s currently not possible :

• IQServer don’t provide the generation of token from the UI ( whereas it’s possible in Nexus Repository )
• Even if we reuse the session cookie from the browser, it’s seems to be blocked for SAML authentication.

IQServer reply with the message : error 400 : The login method that has been utilized for authentication does not support the creation of user tokens

May you please tell me what you think of this ?

Thx and regards

Aldric

post by alan.wood on Dec 2, 2021

Alan Wood
Innovator

We just experienced the same issue, makes SAML less than ideal with IQ. As you stated Nexus works fine.

New & Unread Topics