NathanTarbert / jackson-supertokens-express

A project to demonstrate the integration of SAML using SuperTokens and SAML Jackson.

SAML Jackson + SuperTokens Demo App

This demo app shows how to integrate SAML Jackson in a Node + React app that uses SuperTokens for user authentication. Both SAML Jackson and Supertokens are self-hosted but can also work with hosted versions.

A docker-compose file is provided to ease testing.

Setup

git clone https://github.com/boxyhq/jackson-supertokens-express.git

cd jackson-supertokens-express

npm run dev

Open http://localhost:3366 to see the demo.

Using mocksaml.com to quickly test a SAML connection

This demo app uses mocksaml.com as a SAML provider. To add a tenant for the provider, start the local dev env, and run:

./addTenant.sh <tenantID>

# for example:
./addTenant.sh app1.com
./addTenant.sh app2.com

In the above example, we add two tenants to the app:

• app1.com
• app2.com

In the login UI you will see an input box above the SAML login button that asks you to add a tenant ID. In that, you can type in any tenantID that you have created.

Manually adding a SAML provider

Configure SAML Identity Provider

Follow the doc. You will then need to download the SAML metadata file after configuring the SAML app with your Identity Provider. Okta is a good place and offers a free Developer Account. Feel free to contact us if you need any help with this.

Add SAML Config

Replace <Metadata> with the your metadata content.

curl --location --request POST 'http://localhost:5225/api/v1/saml/config' \
  --header 'Authorization: Api-Key secret' \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --data-urlencode 'rawMetadata= <Metadata>' \
  --data-urlencode 'defaultRedirectUrl=http://localhost:3366' \
  --data-urlencode 'redirectUrl=["http://localhost:3366/*"]' \
  --data-urlencode 'tenant=boxyhq.com' \
  --data-urlencode 'product=supertokens'

Try the Demo

Open http://localhost:3366 to try the demo. Click on the button Continue with SAML Jackson.

Demo Information

• The demo app is configured to use the SuperTokens self-hosted instance running on postgres http://localhost:3567
• The app (React): http://localhost:3366
• The api (Express) server: http://localhost:4000
• Jackson self-hosted instance server: http://localhost:5225
• Jackson uses Postgres as database engine