I am building a scala play web application and I need to build the SSO functionality with an IdP which support SAML v2.0. In addition to SSO, I need to build authorization mechanism within the application based on the roles received from IdP as an attribute of Authentication Assertion message.
I am new to SAML and SSO area. Based on some quick learning about the SAML and available module options in Play scala, I see below options to use with scala play web application,
- Play-pac4J (for authentication and authorization)
- play2-auth (for authentication and authorization)
- Play-pac4J (for authentication) + Deadbolt (for authorization)
If someone having prior experience, please suggest me the best option to build a secure and a quick solution for SSO and authorization in scala play web application.