Node.js SSO ADFS OKTA OAuth LDAP SAML SCIM
This Statement of Work details a contracted project to design, develop, and build Single Sign In (SSO) support
into GitKraken. GitKraken is a desktop tool used primarily by developers to interface with GIT. GitKraken is
currently distributed on Windows, Mac, and Linux platforms. In addition to implementing and testing, the
contract will consist of modifying the GitKraken account site, which is hosted in AWS ECS. However will be
limited to the Account site and will not involve changing products to provide enforcement, which will be done by
the GitKraken team.
There are three parts to the SOW. The first part is providing SAML 2.0 (https://wiki.oasis-open.org/security) to
the GitKraken Account site so that enterprise customers can authenticate via SAML with their favorite SSO
provider. SAML implementation and guided configuration must be provided for the following SSO Identity
Providers (IdP): Azure AD, Okta, G Suite, and Ping Identity.
Part 2 involves syncing teams and members from IdP into the GitKraken Account site. Org administrators
can link a team in GitKraken with a leaf IDP group. Changes to the IdP group will be automatically reflected in
the GitKraken organization team. Once a team is linked, no changes to the team membership can be made in
GitKraken.
Part 3 is to implement a SCIM (http://www.simplecloud.info/) to add, manage, and remove organization
members' access to GitKraken. For example, an administrator can deprovision an organization member using
SCIM automatically removes the member from the organization. New users will trigger an invite workflow
in GitKraken.
Contractor must be able to demonstrate experience implementing SAML and SCIM support into an existing application.