Skip to main content

SAML

SAML is provided as an alternative secure sign in method utilising Duo to authenticate against the server. 

Settings for SAML are in guacamole.properties

image.png

Note this will work for all authentications that are successful through Duo, but the users will be unable to access anything as the user does not correspond within the MySQL database for any connections. 

Settings to note here specifically is the below

skip-if-unavailable - this will skip the authentication method if SAML falls over to SQL authentication

extension-priority - currently as above, is set up to provide any other authentication priority over SAML. This will currently show the SQL login screen, with the option to log into SAML as below

image.png