Cannot access Opsmanager with user/pwd when external identity provider via SAML or LDAP integration about cf-butler HOT 6 CLOSED

Would need to provide an option to configure how the client authenticates. Presently, OpsmanAccessTokenProvider is implemented to support Password grant. To address your request we would need to implement SAML2 Bearer Grant.

An alternate implementation option might be the Client credentials grant.

The cf-java-client upon which cf-butler depends for this interaction does not support SAML2 as far as I can tell. See this package for supported request/response types. May not be a limitation though... we'd need to (custom) implement a new token request/response mapping.

from cf-butler.

• Obtaining an assertion may be challenging to do consistently based on IdP.

from cf-butler.

@erboucherie Please try out this branch to see if it meets your needs. Opted to add support for client_credentials token grant.

from cf-butler.

Hello @pacphi . I just tried it , and it works perfectly . The only comment i could have is that it would be nicer if we could set those new parameters via Environment variables (om.grantType , om.clientSecret) like we do for om.enabled for instance .
That will make the configuration easier than setting different application-{env}.yml file .
But anyway , it works .
Thanks a lot for your velocity .
Best regards
Eric

from cf-butler.

@erboucherie Thanks for catching that. We just need to add the new properties consumed by https://github.com/pacphi/cf-butler/blob/master/src/main/java/io/pivotal/cfapp/config/OpsmanSettings.java to https://github.com/pacphi/cf-butler/blob/master/src/main/java/io/pivotal/cfapp/config/ButlerCfEnvProcessor.java. Will take care of that.

from cf-butler.

This PR closes the issue.

from cf-butler.