NagiosXI SAML Authentication

Adds SAML SSO capabilities to a Nagios XI installation.

Uses OneLogin's php-saml library to provide SAML connectivity and features.

Installing

• Clone/place the contents of this repo on your Nagios XI server into the <nagiosxi_root>/html/includes/components/samlauthentication directory. You will have to create the samlauthentication directory.
• Run composer install from inside the samlauthentication directory to install all dependencies
• Log into your NagiosXI web interface and go to Admin > Manage Components
• Look for the "SAML Authentication" component and click on the Edit Setting (wrench) icon
• Enable the desired options under the "Global Settings" section
• Provide values for your SSO provider under the "Identity Provider (SSO) Setting" section
• Use the values under the "Service Provider (SP) Values" section to configure the application in your IDP
• Click Apply Settings

Authentication Providers

This component has only been tested with Azure AD and SimpleSAMLphp as Identity Providers, but it should work just fine with any other providers that support SAML 2.0.

Gotchas and Caveats

• Users must be pre-populated in the NagiosXI interface, either by hand or via the out-of-box Active Directory/LDAP integration. Just-in-time (JIT) user provisioning is not available, yet...
• The "Username Attribute" field, on the SAML Authentication settings page, must map to an attribute that contains the same value that is set in the user's Nagios XI "Username" field (Admin > Manage Users).

Future Features

• Just-in-time provisioning. Create new users and permissions automatically when logging in for the first time.
• Add a "Sign in with SAML" button to the default login page. Should be able to by styled with a logo and/or brand colors.
• Parse the IDP's metadata URL to populate the remaining fields automatically. Completed