Tutorial proposal: Using Ethereum for SAML authentication

[qbzzt]

Tutorial title

Using Ethereum for web2 authentication

Tutorial description

After reading this tutorial, a developer will be able to integrate Ethereum login (web3) with SAML login (a standard used in web2 to provide single sign-on and other related services. This will allow access to web2 resources to be authenticated through Ethereum signatures, with the user attributes coming from attestations.

The point is to integrate Ethereum security gradually into legacy web2 services.

Tutorial tags

web2, authentication

Skill level

Beginner

Hosted on ethereum.org or hosted elsewhere?

Hosted on ethereum.org

For tutorials to be hosted on Ethereum.org: Tutorial Content

1. Introduction: Why do this?
   1. SAML for Ethereum people
   2. Ethereum for SAML people
2. Setup
   1. Creating a SAML service provider (SP)
   2. Creating a (for now) traditional SAML identity provider (IdP)
3. Signing in
   1. Getting a signature through a wallet
   2. Using that signature for SAML
4. User attributes
   1. Why? The service provider might not know the user
   2. Getting user attributes from EAS
   3. Passing those user attributes to the SP.
5. Conclusion
   1. When is this a good solution?
   2. Using MPC to remove the IdP's ability to cheat (just the idea, but I might implement it in a sequel article)

For tutorials hosted elsewhere: URL to tutorial

No response

Would you like to work on this issue?

• Yes
• No

[qbzzt]

@wackerow

[wackerow]

Sounds great! thanks @qbzzt... have assigned

[qbzzt]

Note: There has been work on this, but https://ethglobal.com/showcase/saml-wallet-d738w is going the opposite direction (adding Ethereum to a traditional IdP), and https://github.com/gtaschuk/saml-eth hasn't been modified in five years.