Has anyone tried to setup SSO with Apigee Edge Enterprise UI, specifically using ADFS SAML?

Google Cloud Apigee
1

Ideally the goal here is to use adfs and SAML for a single sign on to apigee edge, rather than using Apigee’s openldap for authentication to the Enterprise UI. If anyone has tried this or has the details can you share them?

1 Like
2

Hi David, what is your version of apigee edge?

You can delegate authentication to AD [or any ldap v3], so AD can be used for authentication instead of openldap

So one could login with their AD creds to enterprise UI,

but SAML based SSO for Enteprise UI is not supported today

1 Like
3

We are looking at the 3rd party authentication using LDAP but I was more interested in single sign on.

4

ah ok, unfortunately, its not supported today

5

Support for SAML2 is something that’s definitely in the roadmap.

3 Likes
6

We are in process of implementing Apigee Edge Cloud in our org. To avoid maintaining users and passwords in Apigee, we would love to have ability to SSO into Edge management UI using SAML. @Joel D’sa, any estimates on when is Apigee planning to have the feature?

7

We have been pushing for this for MONTHS.

8

my understanding - from what i have been told - is that this will be released AT THE EARLIEST in the second OPDK release in 2016. We pushed hard for this feature - making the argument that the existing options for SSO are .. well .. not particularly useful.

If it magically showed up in the next release I would have a party!

9

@sudheendra1

do you know when this will be available?

10

Any updates on allowing SAML login to APIGEE compared to username and password based login ?

11

Apigee now supports authentication to the Apigee Edge management UI via an external SAML-based identity provider (IdP). This makes it easy for customers to leverage an IdP (ADFS, Okta, Ping, or OneLogin, for example) of their choice, as long as it supports SAML 2.0 to authenticate Apigee Edge users.

We’re excited to announce the general availability of SAML-based single sign-on (SSO) for Apigee Edge for customers managed and hosted by Apigee.

For more details, refer here.

1 Like
12

@nishah @David Ryan @mmeswani @Thomas.Lenoir @Benjamin Goldman FYI

13

@Mukundha Madhavan Please refer the posting SAML feature under https://community.apigee.com/articles/39063/enable-saml-for-apigee-edge-production-organizatio.html

1 Like
14

Please see https://community.apigee.com/articles/39063/enable-saml-for-apigee-edge-production-organizatio.html

15

Please see https://community.apigee.com/articles/39063/enable-saml-for-apigee-edge-production-organizatio.html

1 Like
16

Please see https://community.apigee.com/articles/39063/enable-saml-for-apigee-edge-production-organizatio.html

17

Is there a plan to extend SAML based SSO support to private cloud?

18

Yes, SAML support for OPDK is definitely in the roadmap.

19

Is it applicable for private cloud ? especially with Active Directory Federation services as the IdP ?

we are using the new 4.19.01 version.

all of the documentations are based on Apigee Edge for customers managed and hosted by Apigee.

20

@Shawky Foda Yes, SAML integration with ADFS and New UI Experience are applicable for private cloud as well.

For installing Edge OPDK components you are expected to use OPDK documentation. Steps for configuring ADFS/Edge SAML integration are same across both offering, so you use Cloud doc pages.