After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 698817 - GOA accounts won't work with Google Apps SSO & SAML
GOA accounts won't work with Google Apps SSO & SAML
Status: RESOLVED DUPLICATE of bug 587145
Product: libsoup
Classification: Core
Component: Misc
unspecified
Other Linux
: Normal normal
: ---
Assigned To: libsoup-maint@gnome.bugs
libsoup-maint@gnome.bugs
Depends on:
Blocks:
 
 
Reported: 2013-04-25 07:20 UTC by 255993
Modified: 2018-04-17 10:06 UTC
See Also:
GNOME target: ---
GNOME version: ---


Attachments
screenshot (518.67 KB, image/png)
2013-04-25 07:20 UTC, 255993
Details

Description 255993 2013-04-25 07:20:23 UTC
Created attachment 242391 [details]
screenshot

Embeded webkit fails to login to google apps account which has SSO with SAML enabled as the SAML page is behind apache with basic auth or GSSAPI. GSSAPI does not seem to be supported by webkit at all :( But the basic auth fails because popup login window gets it's focus stolen by parrent and you can't log in.
Comment 1 Debarshi Ray 2014-07-22 09:54:07 UTC
I recently had the opportunity to try a Google Apps deployment with a SSO, but I don't think it was SAML. I can't fix this without access to such a system.

Having said that, one option would be to hook into WebKit and instead of showing a popup login window for basic auth we can embed it inside the existing dialog.
Comment 2 Debarshi Ray 2018-04-17 10:06:00 UTC
WebKitGTK+ now supports GSSAPI/Negotiate via libsoup (bug 587145). If you have a valid Kerberos ticket-granting ticket (or TGT) on your system, then the embedded WebKitWebView should transparently use that to log-in without prompting the user for any further credentials.

This works on the GSSAPI/Negotiate based Google Apps deployment that I use at work.
Comment 3 Debarshi Ray 2018-04-17 10:06:09 UTC

*** This bug has been marked as a duplicate of bug 587145 ***