[PR #3660] [MERGED] feat(sso): defaultSSO options and ACS endpoint #13187

Closed
opened 2026-04-13 08:48:57 -05:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/better-auth/better-auth/pull/3660
Author: @Kinfe123
Created: 7/28/2025
Status: Merged
Merged: 9/19/2025
Merged by: @Bekacru

Base: canaryHead: feat/sso-default-sso-asc-endpoint


📝 Commits (10+)

📊 Changes

10 files changed (+1350 additions, -224 deletions)

View changed files

📝 demo/nextjs/lib/auth.ts (+106 -1)
📝 demo/nextjs/package.json (+1 -0)
📝 docs/components/sidebar-content.tsx (+15 -0)
docs/content/docs/guides/saml-sso-with-okta.mdx (+174 -0)
📝 docs/content/docs/plugins/sso.mdx (+108 -45)
packages/sso/CHANGELOG.md (+0 -20)
📝 packages/sso/src/index.ts (+767 -137)
📝 packages/sso/src/oidc.test.ts (+84 -21)
📝 packages/sso/src/saml.test.ts (+92 -0)
📝 pnpm-lock.yaml (+3 -0)

📄 Description

Summary by cubic

Added support for a defaultSSO option to the SSO plugin, allowing configuration of a default SAML or OIDC provider for testing and development. Introduced a new SAML Assertion Consumer Service (ACS) endpoint for improved SAML response handling.

  • New Features
    • Added defaultSSO config to the SSO plugin to enable a fallback SSO provider when no match is found in the database.
    • Implemented a dedicated ACS endpoint (/sso/saml2/sp/acs/:providerId) for SAML responses.
    • Updated documentation with usage examples and configuration details for defaultSSO.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/better-auth/better-auth/pull/3660 **Author:** [@Kinfe123](https://github.com/Kinfe123) **Created:** 7/28/2025 **Status:** ✅ Merged **Merged:** 9/19/2025 **Merged by:** [@Bekacru](https://github.com/Bekacru) **Base:** `canary` ← **Head:** `feat/sso-default-sso-asc-endpoint` --- ### 📝 Commits (10+) - [`12b215a`](https://github.com/better-auth/better-auth/commit/12b215a6cf116549ece46a037a30668b2c60b915) feat(sso): defaultSSO and asc enpoint - [`3eb0464`](https://github.com/better-auth/better-auth/commit/3eb0464271afcf471954815af4fe468aa98ea960) lint - [`38a948b`](https://github.com/better-auth/better-auth/commit/38a948b532b5b343faff8c8a3077d9de1f15c73b) update - [`25badae`](https://github.com/better-auth/better-auth/commit/25badae8697d1d471be64530910cbf8b0acb6b54) update - [`4379ff2`](https://github.com/better-auth/better-auth/commit/4379ff2015af16e92c9deebb0c9822c860df9ae6) singlesign-on - [`f2ec00e`](https://github.com/better-auth/better-auth/commit/f2ec00e35e0c47820b9d3b26d1ca2643ae8b54c6) console - [`db2976d`](https://github.com/better-auth/better-auth/commit/db2976d0800913c7d9804b4596b5ce81417db6a9) lint - [`e8109e5`](https://github.com/better-auth/better-auth/commit/e8109e5c915b960649c58587f30a097988de19c5) lint - [`3f6f832`](https://github.com/better-auth/better-auth/commit/3f6f832240cde0f26de652904328e356fc77f277) changesets - [`8276af5`](https://github.com/better-auth/better-auth/commit/8276af53c79b4a067f32ad55f74275179fa7aa77) changeset ignore ### 📊 Changes **10 files changed** (+1350 additions, -224 deletions) <details> <summary>View changed files</summary> 📝 `demo/nextjs/lib/auth.ts` (+106 -1) 📝 `demo/nextjs/package.json` (+1 -0) 📝 `docs/components/sidebar-content.tsx` (+15 -0) ➕ `docs/content/docs/guides/saml-sso-with-okta.mdx` (+174 -0) 📝 `docs/content/docs/plugins/sso.mdx` (+108 -45) ➖ `packages/sso/CHANGELOG.md` (+0 -20) 📝 `packages/sso/src/index.ts` (+767 -137) 📝 `packages/sso/src/oidc.test.ts` (+84 -21) 📝 `packages/sso/src/saml.test.ts` (+92 -0) 📝 `pnpm-lock.yaml` (+3 -0) </details> ### 📄 Description <!-- This is an auto-generated description by cubic. --> ## Summary by cubic Added support for a defaultSSO option to the SSO plugin, allowing configuration of a default SAML or OIDC provider for testing and development. Introduced a new SAML Assertion Consumer Service (ACS) endpoint for improved SAML response handling. - **New Features** - Added `defaultSSO` config to the SSO plugin to enable a fallback SSO provider when no match is found in the database. - Implemented a dedicated ACS endpoint (`/sso/saml2/sp/acs/:providerId`) for SAML responses. - Updated documentation with usage examples and configuration details for `defaultSSO`. <!-- End of auto-generated description by cubic. --> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-04-13 08:48:57 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/better-auth#13187