Multiple IdPs for SAML from user email domain

Abiquo 5.2.1 introduces multiple identity providers (IdPs) for the SAML integration. 

There is a new option that you can add to the login screen to work with multiple IdPs. This option is "SAML + user".

Open

The user enters their email address and Abiquo will use the email domain to match one of the IdPs.
The user then clicks the button to go to the identity provider and authenticate.

Open

If the user's email domain does not match an IdP, Abiquo will use the default IdP. 

In Abiquo 5.2.1, the platform uses the same IdP configuration for all providers, for example, to match an Abiquo role, it will search for the same abq-role attribute.

To activate SAML for multiple IdPs, you will need to configure Abiquo to add the new IdP and then activate the feature in the user interface configuration.

See SAML integration