Security, external IdPs and 3CX SSO SAML

[rlg]

Hello,

We have many customers here using dedicated IdP in their infrastructure, as a major security component. Even sometimes self-hosting it.
They plug all their applications to their IdP ; business applications, collaboration suites... Including (when used) Google Worspace and Microsoft 365, which then become another satellilte around the IdP central point.
All this standardizing users' authentication, making it more robust, more consistent.

Unfortunately today, one of their major tool can't follow the same principle : 3CX.
As it lacks the ability to connect to an external IdP, using standards, such as SAML.

3CX Team, then, is the idea somewhere on the roadmap ?
Do you plan to support SAML so that we could connect 3CX to any IdP on the market ?
SAML is already implemented in most of (all ?) the languages, making the integration, I assume, rather easy.

I know there's the idea in the dedicated forum section.
But wanted to share the importance of such a security topic.

Thank you very much for your consideration!

 

[rlg]

Any thoughts @3CX Team regarding this ?
Many thanks again

 

[rlg]

I was browsing the forum looking for this topic.
So there's the main idea topic.
There are also requests about OKTA integration from @mrush here, and from @Will2 here, which would also be covered directly integrating SAML / OpenID standards.
@Nico Haas goes even further asking to only accept sso, which of course is a must have...

Waiting for this, I'm looking to hosts our 3CX instances behind a WAF, with a SSO component plugged to the IdP.
Will lead to a 2-steps login, annoying users, but will be secure behind the SSO / IdP.
Of course having this directly built into 3CX would be the best...

Thank you again @3CX Team !

 

[KyriacosS_3CX]

Hi @rlg ,

Simply wishing to let you know that your posts here are being seen.

 

[rlg]

Hi @KyriacosS_3CX,
Just wanted to know if you managed to discuss this topic internally ?
Do you perhaps have some elements to give us ?
Thank you very much again

(for completeness, another new related topic here).