From c6327a5e1e885faaea022af011f40b40670f5c38 Mon Sep 17 00:00:00 2001 From: mo khan Date: Thu, 27 Mar 2025 13:59:31 -0600 Subject: docs: add UML Sequence Diagram of SAML flow --- doc/share/authz/DESIGN.md | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) (limited to 'doc') diff --git a/doc/share/authz/DESIGN.md b/doc/share/authz/DESIGN.md index 16134fe..0cf0fc0 100644 --- a/doc/share/authz/DESIGN.md +++ b/doc/share/authz/DESIGN.md @@ -39,6 +39,27 @@ SAML Login Flow +```plantuml +@startuml +Browser -> UI: Get dashboard +UI --> Browser: Generate SAML and redirect to IdP + +Browser -> IdP: Deliver SAML +IdP --> Browser: Redirect to Login Page +Browser -> IdP: Login +IdP --> Browser: Generate SAML with and redirect to UI + +Browser -> UI: Deliver SAML +UI --> IdP: Exchange for Tokens +UI --> Browser: Redirect to dashboard +Browser -> UI: Get dashboard +UI --> API: Request list of projects and provide Access Token +API -> IdP: Validate token and check declarative policy +API --> UI: Return list of projects as JSON +UI --> Browser: Return list of projects as HTML +@enduml +``` + 1. `GET http://ui.example.com/saml/new` 1. `POST http://idp.example.com/saml/new` 1. `GET http://idp.example.com/sessions/new?redirect_back=/saml/continue` -- cgit v1.2.3