cbsso

What problem does it solve?

Simplifies integrating Single Sign-On into ColdBox/BoxLang applications by providing patterns and guidance for SAML2 and OAuth2/OIDC flows, callback handling, token validation, and user provisioning so teams can avoid common security pitfalls and implementation errors.

Core Features & Use Cases

• Provider configuration for SAML2, OAuth2, and OIDC including client credentials, endpoints, PKCE, and certificate settings.
• Authorization and callback flows including state validation, token exchange, and claim extraction for secure authentication.
• Just-in-time user provisioning and session management with examples for provisioning users on first login and integrating with cbauth/cbsecurity.
• Single logout handling and best practices for storing secrets, enforcing HTTPS, and validating claims.

Quick Start

Use the cbsso skill to generate a ColdBox module configuration and a callback handler that implements OAuth2/OIDC authorization, validates state, exchanges tokens, and provisions users on first login.