Several months ago, as part of my internal move to the “IdP” team at Nextcloud, I started to co-maintain the user_saml application. This application allows Nextcloud users to implement single sign on with the SAML and Kerberos protocol. This protocol is based on XML and is mostly used in combination with Active Directory Federation Services (AD FS), Microsoft Entra ID, Authentik, Okta, Google Workspace and more.
This is a companion discussion topic for the original entry at https://carlschwan.eu/2026/08/07/whats-new-with-saml-support-in-nextcloud/