Source
Permissions, SSO & administration — found from sitemap — BookStack
Checked for BookStack on 1 Nov 2026
- Page
- https://www.bookstackapp.com/docs/admin/saml2-auth/
- Checked
- 1 Nov 2026, 09:02 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:795565e23c7aa8aa064ff93016880011add6cb7c7379d5164f0f082c28c8536f
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
Saml2 authentication Report an error
“BookStack can be configured to utilise a SAML 2.0 based authentication provider as a solution for users to log-in, log-out and self-register within BookStack. This replaces the default email & password authentication mechanism within BookStack.”
-
SAML group sync Report an error
“BookStack has the ability to sync SAML user groups with BookStack roles. By default this will match SAML group names with the BookStack role display names with casing ignored.”
-
SAML single logout Report an error
“# Identity Provider single-logout-service URL # Not required if using the autoload option above. # Not required if your identity provider does not support SLS. SAML2_IDP_SLO=https://example.com/saml2/idp/SingleLogoutService.php”
-
SAML sp signing Report an error
“# Providing these will provide key data within BookStack's metadata endpoint # while implicitly enabling signing on Authn and Logout requests. # This is often required to support Single Logout Service in an ADFS environment. SAML2_SP_x509=<cert_data> SAML2_SP_x509_KEY=<key_data>”
-
SAML metadata autoload Report an error
“# Auto-load metadata from the IDP # Setting this to true negates the need to specify the next three options SAML2_AUTOLOAD_METADATA=false”
-
SAML endpoints Report an error
“/saml2/metadata - Metadata endpoint (GET) /saml2/acs - Assertion Consumer Service endpoint (POST) /saml2/sls - Single Logout Service endpoint (GET)”
-
SAML nameid format Report an error
“NameIDFormat: urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress”
-
SAML auto initiate Report an error
“# Control if BookStack automatically initiates login via your SAML system if it's the only authentication method. # Prevents the need for the user to click the "Login with x" button on the login page. # Setting this to true enables auto-initiation. AUTH_AUTO_INITIATE=false”
-
SAML external id update Report an error
“If the value of this id changes in the identity provider it can be updated in BookStack by an admin by changing the ‘External Authentication ID’ field on the user’s profile.”
-
SAML onelogin library Report an error
“# Option to override settings passed to the underlying onelogin library # used by BookStack.”
-
SAML video guide Report an error
“A video guide for setting up SAML2 can be found here.”
1 fact read from this page is not shown because it could not be confirmed on the page as captured.
Scores citing this record
- The Engineering Lead Permissions, SSO & administration
- The IT Administrator Permissions, SSO & administration
- The Operations Lead Permissions, SSO & administration
- The Quality Manager Permissions, SSO & administration
- The Skeptic Permissions, SSO & administration
- The Support Knowledge Manager Permissions, SSO & administration