Setting up NextCloud

NextCloud uses the user_saml extension in order to handle SAML2 authentication.

You must first install this extension on your instance, then go to your Settings menu and fill in the following parameters.

Attribute to map the uid to
urn:oid:0.9.2342.19200300.100.1.1
Name id format
Persistent
X.509 certificat of the Service Provider
{{ "".join(service.config["sp_cert"].strip().split("\n")[1:-1]) }}
Private Key of the Service Provider
{{ "".join(service.config["sp_key"].strip().split("\n")[1:-1]) }}
Identifier of the IDP entity
{{ url_for("sso.saml_metadata", service_uuid=service.uuid, _external=True) }}
URL target of the IDP where the SP will send the Authentication Request Message
{{ url_for("sso.saml_redirect", service_uuid=service.uuid, _external=True) }}
URL location of the IDP where the SP will send the SLO request
{{ service.config["application_uri"] }}
Public X.509 certificat of the IDP
{{ "".join(service.config["idp_cert"].strip().split("\n")[1:-1]) }}
{% include "application_saml.html" %}