Is it part of the roadmap to have the DSP also function as an OAUTH2/SAML provider? Given that we have multiple applications authenticated by DSP, when working with frameworks like Meteor and such, user account synchronization is standardized around OAUTH. We’d have a lot of traction and create gr…

Hey Ashwin, Can you clarify your requirement a bit with a simple example, say with two apps and one user logging in with SSO? What would the ideal implementation look like? Thanks, Ben

Sure. We are currently using DSP as a core platform for creating a suite of apps for use by our group of users (curated, not open registration). We also want to create public facing sites where registration does not necessarily mean registration with our core DSP platform. At the same time we want t…

Just re-reading through some of the DSP docs and blog entries, I came across this article: https://blog.dreamfactory.com/blog/bid/341114/OAuth-Tutorial-Part-Two So, DSP can forward OAuth2 requests to external providers. The question is can it function as an OAuth provider on its own using it’s inte…

Hi Ben, have you guys made any progress on DF acting as a SAML provider?

Hi Martin, SAML support didn’t make it into the 2.0 release. We had to focus on OAuth, LDAP, and active directory first. Can you explain your use case with SAML? Thanks, Ben

Hi Ben, sorry was typing in a hurry - meant OAuth server. So where DSP acts as an OAuth provider for 3rd party web applications (for example www.zendesk.com ) and a custom application built on top of DSP. Where DSP then provides the place where all customer registrations take place and it then manag…

Version 2.0 lets you easily add a third-party OAuth provider to authenticate into DreamFactory. For example, you can create a Twitter app, set up all the OAuth config in Twitter, and then have end users authenticate into an app you build on DreamFactory using their Twitter creds. DreamFactory 2.0 i…

Does this mean 2.0 will support api key type access control for mobile devices, as we see used in mobile apps running under multi tenanted SaaS providers? Because I cannot see any way to set that up currently for developer clients who wish to use my DSP as a service in their own mobile apps. I need …

Yes, that’s correct. In 2.0 an “app” is really an API key and you can give that API key directly to developer clients without requiring logins and passwords.

DSP as an OAUTH2/SAML provider

Authentication & Security

benbusse November 17, 2014, 8:16pm 6

Hey Ashwin, sorry for the delay. This capability will ship in version 2.0. early next year.

How to create Custom portals?

Topic		Replies	Views
How to create Custom portals? Authentication & Security	4	3649	April 8, 2015
User Management without email password Authentication & Security	7	3928	November 9, 2015
How to securely access a REST API from a mobile application via DSP? Authentication & Security	8	5638	July 14, 2016
External web service & oAuth2.0 REST API	2	2135	July 10, 2015
Using a current OAuth server for authentication Authentication & Security	6	3213	December 27, 2016

DSP as an OAUTH2/SAML provider

Related topics