ui5-middleware-simplesaml

A proxy that solves SAML auth in a very non-elegant but simple way.

Basically it uses saml-solver. This in turn opens Chromium, where the SAML request is waved through. The tokens are then picked up and used for the UI5 app.

It works most of the time, which was good enough for us.

Usage

Add the following lines to your ui5.yaml. Some of these lines are optional

- name: ui5-middleware-simplesaml
    beforeMiddleware: compression
    mountPath: /sap/opu/odata/
    configuration:
        baseUrl: "https://gwaas-xxxxxxxxxx.hana.ondemand.com"
        initPath: "/odata/sap/zping"
        manualInteractions:
            "https://adfs.startup.com/adfs/ls/": "#csspathofclickableelement"
        pathMappings:
            "/": "/odata/"
        debug: false

Also it should be SSO of course but sometimes it only works if your credentials are stored in some secret file on your machine:

Store this in /$HOME/.saml_auth.json (/$HOME/saml_auth.json on Windows)

{ 
    "user": "myuser", 
    "password": "mypw"
}

Settings

|Param|Description| |-|-| |mountPath|The relative path which should trigger proxying| |configuration.baseUrl|The host where your requests should be proxied to| |configuration.initPath| We found that the package only works if there is some kind of ping call before the actual requests from the app are started. This can be the same as one of your app's OData services.| |configuration.manualInteractions|Not relevant for most use-cases but feel free to ask|

Credit

tobias_kay did the heavy lifting so feel free to give him some GitLab stars!