SAML questions - does YT support being a consumer? Seems like it should.

I can't find some specific information about YT being a consumer of SAML. I see it supports being an IdP and then it also says to configure the SAML provider (itself) - but if I want to use a company supplied SAML provider, how does that work?

Seems like this is required information any basic consumer needs, as well as where to put the x509 certificate provided by the IdP.

Name ID Format: (urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified  ??)
Name ID Attribute: ??
Assertion Consumer Service (ACS): myyoutrack.com/WHAT?
Service Provider ID (SPID): ??

5 comments
Comment actions Permalink
Official comment

Did you try to refer to https://www.jetbrains.com/help/youtrack/standalone/SAML-2.0.html?search=SAML  and related documentation?

Comment actions Permalink

Okay, I'm blind - I noticed a couple of these things on the first tab of the page. I dismissed it originally thinking it was related to the IdP piece. I think between the two screens it might have all the places I expect to enter SAML information but I still don't feel like it's documented / supported.

0
Comment actions Permalink

Okay yes - being a SAML "client" doesn't seem to be an option right now, it looks like.

Is this on the roadmap? I do not get any use out of Youtrack being the identity provider. I need it to be an identity consumer from my company's SAML IdP.

 

0
Comment actions Permalink

Yes. YT will act as an IdP. I need it to act as a SAML 2.0 consumer. It doesn't support authentication via SAML. Only providing authentication... which isn't helpful.

0
Comment actions Permalink

Unfortunately, it's not yet implemented. Please vote/comment for the issue in our tracking system to increase it's priority and be notified about updates:

https://youtrack.jetbrains.com/issue/JPS-3207 .

0

Please sign in to leave a comment.