From 992b0b0b100500473791ae55977e6ee06aff2363 Mon Sep 17 00:00:00 2001
From: nd <git@notandy.de>
Date: Sat, 31 Oct 2020 02:36:18 +0100
Subject: [PATCH] add SAML/OAUTH support via external user

---
 templates/nginx.j2 | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/templates/nginx.j2 b/templates/nginx.j2
index f196460..5d9863d 100644
--- a/templates/nginx.j2
+++ b/templates/nginx.j2
@@ -45,6 +45,9 @@ server {
 		fastcgi_param HTTPS on;
 		fastcgi_param modHeadersAvailable true;
 		fastcgi_param front_controller_active true;
+		# needed to (optionally) support saml via a REMOTE-USER header
+		fastcgi_param REMOTE-USER $http_REMOTE_USER;
+
 		fastcgi_pass php-handler;
 		fastcgi_intercept_errors on;
 		fastcgi_request_buffering off;