Change Details

Hello #sre - We'd like to add ApereoCAS as an SSO option to Semgrep's Cloud Dashboard (semgrep.com/login). The #security-team has purchased [[ https://semgrep.dev/products/semgrep-supply-chain | their supply chain ]] tool and would prefer being able to auth via an in-house SSO (Apereo or Okta, if Apereo can't work) as opposed to github.com or gitlab.com. Semgrep's Cloud Dashboard currently supports OpenID and SAML 2, and I assume we'd prefer to use the latter? Anyhow, the required fields to add SAML 2 SSO support via their dashboard are: *Email domain*, *IdP SSO URL*, *IdP Issuer ID* and the *certificate*. Let me know if this works - not sure if we only use Apereo for Wikimedia-managed tools. If so, I can reach out to ITS about using Okta instead.

Hello #sre - We'd like to add ApereoCAS as an SSO option to Semgrep's Cloud Dashboard (semgrep.com/login). The #security-team has purchased [[ https://semgrep.dev/products/semgrep-supply-chain | their supply chain ]] tool and would prefer being able to auth via an in-house SSO (Apereo or Okta, if Apereo can't work) as opposed to github.com or gitlab.com. Semgrep's Cloud Dashboard currently supports OpenID and SAML 2, and I assume we'd prefer to use the latter? Anyhow, the required fields to add SAML 2 SSO support via their dashboard are: **Email domain**, **IdP SSO URL**, **IdP Issuer ID** and the **certificate**. Let me know if this works - not sure if we only use Apereo for Wikimedia-managed tools. If so, I can reach out to ITS about using Okta instead.

Hello #sre - We'd like to add ApereoCAS as an SSO option to Semgrep's Cloud Dashboard (semgrep.com/login). The #security-team has purchased [[ https://semgrep.dev/products/semgrep-supply-chain | their supply chain ]] tool and would prefer being able to auth via an in-house SSO (Apereo or Okta, if Apereo can't work) as opposed to github.com or gitlab.com. Semgrep's Cloud Dashboard currently supports OpenID and SAML 2, and I assume we'd prefer to use the latter? Anyhow, the required fields to add SAML 2 SSO support via their dashboard are: ***Email domain***, ***IdP SSO URL***, ***IdP Issuer ID** and the **certificate***. Let me know if this works - not sure if we only use Apereo for Wikimedia-managed tools. If so, I can reach out to ITS about using Okta instead.