Problem enabling SSO SAML login

[cosmin-voicu]

Hello guys,

I'm trying to setup Netbox with SAML SSO login using the SAML Auth social core backend but I can't seem to get it working.

REMOTE_AUTH_ENABLED = True
REMOTE_AUTH_BACKEND = 'social_core.backends.saml.SAMLAuth'

I've installed both onelogin and python3-saml by adding them to local_requirements.txt and running upgrade.sh. With both installed i get this when accessing the app:

<class 'ImportError'>

OneLogin_Saml2_Auth is not available due to a package namespace conflict.

You have both 'onelogin' (API management) and 'python3-saml' (SAML authentication) installed.
These packages both provide 'onelogin' modules, causing a conflict.

To fix this conflict:

OPTION 1 - If you only need SAML authentication:
  1. Uninstall this package: pip uninstall onelogin
  2. Then import will work: from onelogin.saml2.auth import OneLogin_Saml2_Auth

OPTION 2 - If you need both packages:
  1. Import directly from python3-saml's location in site-packages
  2. See: https://github.com/onelogin/python3-saml for documentation

OPTION 3 - Use virtual environments to separate the packages

To check your installations: pip list | grep -E '(onelogin|python3-saml)'

Python version: 3.12.3
NetBox version: 4.4.8
Plugins: None installed

If I uninstall onelogin from the virtual env I get:

<class 'ModuleNotFoundError'>

No module named 'onelogin.saml2.auth'

Python version: 3.12.3
NetBox version: 4.4.8
Plugins: None installed

Here is the pip freeze output for the the two packages.

(venv) bittnet@tacacs-plus:/opt/netbox$ pip freeze | grep -E 'onelogin|python3-saml'
onelogin==3.2.3
python3-saml==1.16.0

Any idea would be greatly appreciated. Thanks!

[markkuleinio]

I've installed both onelogin and python3-saml by adding them to local_requirements.txt

What's the reason for that? I only have python3-saml and works fine (NetBox 4.4.7)

If I uninstall onelogin from the virtual env I get:

Have you tried rebuilding the venv, instead of removing just that one package?

[cosmin-voicu]

Yeah, that did the trick! Thank you @markkuleinio! Saved me a lot of more troubleshooting hours.