SAML SSO

Couchdrop can be configured for SAML authentication via the web interface.

Pre-Requisites

Users must already exist in Couchdrop for SAML login and as Couchdrop supports login via SFTP and FTP, they must have a password set as well. SAML Login is only available through the web interface.

Configuration Steps

Enable SAML SSO

Login to Couchdrop as the owner. Navigate to Administration --> SSO --> SAML SSO

You will need to provide the following details to Couchdrop so that it can connect to your identity provider.

Azure SAML Setup

Required Fields

Field	Example	Description
SAML IDP Identity ID	https://sts.windows.net/6c4526c1-a311-479b-af9c-1e0ecc4122be/	(Microsoft Entra Identifier) See Step 4 of your Entra Single Sign-On App Settings.
SAML IDP SSO URL	https://login.microsoftonline.com/6c4526c1-a311-479b-af9c-1e0ecc4122be/saml2	(Login URL) See Step 4 of your Entra Single Sign-On App Settings.
SAML IDP Certificate	-----BEGIN CERTIFICATE----- MIIC8DCCAdigAwIBAgIQeTBhv/RYZrpAXGf+yF185DANBgkqhkiG9w0BAQsFADA0MTIwMAYDVQQD ..... -----END CERTIFICATE----	Certificate (Base64) See Step 3 of your Entra Single Sign-On App Settings.
SAML IDP Email Attribute Key	http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress	The example provided is the default for all Microsoft Single Sign-On Apps.