We are testing out the option to use SAML login to be able to link LimeSurvey with AD. Usage of LDAP for this purpose is prohibited in our company. SAML plugin is not yet fully configured and I would like some input is it worth to try to figure the config out or won't it work for what I want it for.

Is it possible to use SAML login as base to register for a survey or is the SAML authentication method meant only for the admin interface?
Just so when you have a survey which requires authenication, you don't need to fill in a registration form and get a link to your token, you just input your AD username and password and get get straight to filling the form?

Version is Version 3.17.7+190627

Hi,

What SAML Login ? Seems limesurvey GMBH have a plugin with allowing register in Survey via SAML.

Maybe you can contact them : www.limesurvey.org/customer-support/contact-us

github.com/auth-it-center/Limesurvey-SAML-Authentication is the thing I think what was put onto out limesurvey server. Right now we are looking into free plugin options, having something developed for us would probably cost I think. I didn't find any plugins for what you mentioned in LimeStore

No,

The LimeSAML plugin by LimeSurvey GMBH is not on limestore and is not free.

About the plugin you have : you must contact their dev …

Guess I am out of luck as I cannot find the plugin's author email anyplace in github . But thank you for your insight.

Hi Kohuke,

Im the author of the original SAML plugin for Limesurvey that I created 6 years ago:
github.com/pitbulk/limesurvey-saml


It seems that some people took it and added some new features.

I had no access to the code of the version created by LimeSurvey GMBH so can't
say how complete it is.

I implemented 2 new versions:
- A version that keep using simpleSAMLphp and where I added new features.
- A version that uses php-saml instead of simpleSAMLphp which eliminates the session conflict issue and the ability to configure the IdP directly on Limesurvey admin settings (you can only connect 1 IdP for now, but if the plugin become popular I plan to support there multiple IdPs).

I plan to sell it on LimeStore, but for now since marketplace seems not mature, I plan to sell it by Paypal for now.

I gonna sell it for 100€ and early adopters will receive free support.
Later, I plan to join the yearly subscription, and maybe I reduce the price.
Early adopters will be added to the annual fee scheme, but maybe I exclude them from the first payment.

If you interested, message me sixto.martin.garcia+limesurvey@gmail.com.

The extension is compatible with Limesurvey 3 and Limesurvey 4.

Features:
- Based on simpleSAMLphp or php-saml (configuration directly done on Limesurvey settings, instead simpleSAMLphp that manages it via filesystem).
- Supports multiple Identity providers
- Just-in-time provisioning (auto-crate users) assigning the permissions you set on the settings.
- Auto-update user data after SSO
- User Attribute Mapping
- Support for groups (crating them or just assign to the user if already exists)
- Hooks to extend functionality
- Configurable SAML Link showed on the login form.
- Ability to force SAML login on Limesurvey Login form.
- Avoid accounts created by SAML to login using normal login

As you see very complete and flexible.

It is compatible with any Identity Provider: Azure AD, Okta, OneLogin, Auth0, Centrify, Salesforce, Citrix, AWS SSO.

If required, I can customize it to cover any possible need.

Hi,

Maybe you can create a topic at www.limesurvey.org/forum/plugins ?

Denis