Setting up SSL with SAML on Windows Server

[ajwgregg (Anthony Gregg)]

Hi,

I am currently on v8.1 of SonarQube on Windows Server. I would like to setup SSL for the current SonarQube installation. Also we are planning to setup SAML (SecureAuth) immediately upon setting up a successful SSL connection. So I have been researching how to do this. I have found many confusing threads that does not seem to give a clear cut answer to this combination. They are in summary, as follows:

• Jesse Houwing’s article on how to configure SSL for SonarQube on Windows using IIS - https://jessehouwing.net/sonarqube-configure-ssl-on-windows/
• I then found a link within the SonarQube documentation pointing to a Native SSL setup, but from what I gather this capability has now been removed from SonarQube. This is only speculative, but based on what I am reading I am assuming that is the case. The documentation is here: https://docs.sonarqube.org/spaces/flyingpdf/pdfpageexport.action?pageId=6950118
• Then finally I found in the current documentation the following: https://docs.sonarqube.org/latest/setup/operate-server/
  which states the following:
  Using IIS
  Please see: http://blog.jessehouwing.nl/2016/02/configure-ssl-for-sonarqube-on-windows.html
  Note that the setup described in this blog post is not approprite for SAML through IIS.
• I have also read the following entry in this forum: [SLOVED] IIS reverse proxy seems to be breaking my SonarQube SAML auth, any ideas?

So having seen all this information now leads me to my question, what is the way I should be achieving my goal of setting up SonarQube with SSL and SAML with my current environment?

Thanks so much for your help, in advance.

Anthony

[Colin]

Hey there.

This guide seems to get most people on their way.

SonarQube 7.8 on IIS with ADFS SAML 2.0 authentication

Hi all, I just put together a guide for those of you that need to run on Microsoft Windows. It covers configuring the reverse proxy, setting up things and getting ADFS SAML 2.0 authentication to work with ADFS 5.0 (Win2019). I hope someone out there finds this useful.

[ajwgregg (Anthony Gregg)]

Colin,

Thanks so much for this guide. I will check it out and see if I can get both SSL and SAML implemented with it.

Anthony

p.s. Sorry for the late response. Have been distracted with many other things going on.

[ajwgregg (Anthony Gregg)]

@Colin - so, I have now read the article and I was wondering about the architecture. Is this essentially using IIS to redirect http traffic to https? If that is the case, then in essence, the current web server (apache) cannot be configured to support https? So this is the workaround?

Thanks Colin.

Anthony