Q&A: How can I deactivate saml

saml
sso
qa

#1

Question:

How can I deactivate saml

Answer:

You can deactivate saml/sso with some ucr varaiblaes:

ucr info umc/web/sso/enabled
umc/web/sso/enabled: true
 If this option is activated, the login via single sign-on is tried before the regular login is used.
 Categories: management-umc

This prevents the creation of DNS entries:

ucr info ucs/server/sso/autoregistraton
ucs/server/sso/autoregistraton: <empty>
If this variable is set to 'true', this UCS system tregisters its IP address at the fqdn of the identity provider (ucs/server/sso/fqdn). (default: true)
Categories: management

Despite this you should set a valid value for ucs/server/sso/fqdn.
Afterwards re-run the joinscript:

univention-run-join-scripts --force --run-scripts 91univention-saml.inst

closed #2