Need help with SAML configuration in Jenkins Helm chart

Using Jenkins
1

Jenkins setup:
Jenkins version: v2.426.3 running on EKS.

Here’s the snippet of my securityRealm settings:

securityRealm: |-
saml:
displayNameAttributeName: “http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name”
groupsAttributeName: “http://schemas.xmlsoap.org/claims/Group”
idpMetadataConfiguration:
period: 0
xml:
maximumAuthenticationLifetime: 86400

I have my idp metadata in a XML format. How do I provide the same in the above configuration?

2

Hello @anilraje122 and welcome to this community. :wave:

Can’t you provide the Identity Provider (IdP) metadata in XML format directly in the xml field under idpMetadataConfiguration?

The XML data should be provided as a string. Here’s an example of how I think you could do this:

securityRealm: |-
  saml:
    displayNameAttributeName: "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name"
    groupsAttributeName: "http://schemas.xmlsoap.org/claims/Group"
    idpMetadataConfiguration:
      period: 0
      xml: >
        <?xml version="1.0" encoding="UTF-8"?>
        <!-- Your IdP metadata XML goes here -->
    maximumAuthenticationLifetime: 86400
3

Hi @poddingue ,

Thanks for your response. I tried what you shared but it is not working. Jenkins UI is coming up after the upgrade but I am unable to login. I compared the config.xml with manual configuration and identified that “urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect” is missing in the helm configuration. Do you know how we can add that?

Thanks,
Anil Raj