Forum Discussion

StuKirby's avatar
StuKirby
Icon for Nimbostratus rankNimbostratus
Oct 05, 2018

SAML for Chromebooks advanced integration

Hello

 

I'm hoping someone clever can help me. I have enabled and can use SAML to login to Chromebooks but Google say there is a way to pass through the credentials to the Chrome browser so that after login the SAML is still in the users session. They advise to call an API:

 

https://www.chromium.org/administrators/advanced-integration-for-saml-sso-on-chrome-devices

 

I don't know how to invoke or insert this JavaScript or where. Any ideas?

 

Regards

 

Stuart

 

BIG-IP
BIG-IP Access Policy Manager (APM)
cloud
security
  • StuKirby's avatar
    StuKirby
    Icon for Nimbostratus rankNimbostratus
    Oct 05, 2018

    Well as I'm posting on the F5 forum under the APM section I thought it obvious that my SAML is via F5 APM.

     

  • Andy_McGrath's avatar
    Andy_McGrath
    Icon for Cumulonimbus rankCumulonimbus
    Oct 05, 2018

    You have posted a link to a Chromium doc related to using SAML within a Chromebook without directly stating you are using an F5 APM as a SAML IdP and also assume we all have the time to read up on 'Advanced Integration for SAML SSO on Chrome Devices'

    If you don't make it clear you will not likely get the help you are after.

    However, I think want you need to do is create a customised logon page within the APM and add in the JavaScript, linked to in the documentation, and write a bit of additional javascript around the login form calling the three methods:

    • google.principal.initialize(callback)
      - Once at the start of the authentication flow.
    • google.principal.add(details, callback)
      - When the user has finished entering his/her credentials
    • google.principal.complete(details, callback)
      - When user’s credentials have been verified by the SAML IdP and the user is authenticated.

    Basically this is a locally executed process via javascript but needs to be provided by the logon page/form without interfering with the F5 APM authentication process its self.

    That is until you get to the 

    complete
    method as the F5 APM needs to pass the 
    RelayState
    and 
    SAMLResponse
    to a Google URL.

    Finally though I do know Javascript I only really write back-end stuff and never front-end web stuff so not sure on the best approach for this, need someone with some front-end javascript experience I think.

  • moureg16's avatar
    moureg16
    Icon for Cirrus rankCirrus
    Oct 10, 2018

    hi there , I’m working on using F5 as a SAML idP and I need to emulate a SaaS as SP. I faced a lack of knowledge a round related to how to create such lab “the application demo” to use it as a SP

     

    anyone to help, please !