有没有办法将 SAML IDP 与 Sonatype nexus 存储库管理器一起使用？

Question

We want to migrate our old nexus to new one. bur in the new one I wanna use SAML Idp for authentication but not found anything about it. Is there a way to configure SAML Idp in nexus? And our nexus is not Pro version of course.

Answer 1

Try used patch for Nexus OSS with authorization via SSO and tokens . It implements authentication via Single Sign-On (SSO) using a SAML identity provider such as Keycloak, Okta, ADFS and others.

Solution distributed as docker container and compose.yml configuration which may be extended with "compose.override.yml" (for example, pass additional files to the container):

git clone https://github.com/a-langer/nexus-sso.git
cd ./nexus-sso
mv ./_compose.override.yml ./compose.override.yml
# Change compose.override.yml for you settings and run service
docker compose up -d 

Authentication may be configured with environment variables in .env file, for more flexible settings, can make changes directly to shiro.ini . However, this also requires that the configuration files of service provider (ex., sp-metadata.xml ) and identity provider (ex., metadata-okta.xml or metadata-keycloak.xml ) will be passed to the container. Examples of creating SAML configurations see in " Keycloak SAML integration with Nexus application ".