SAM authentication - old powershell module

[PetrMa]

Hello,

is there some plan to update the powershell module for SAML authentication?
The module [PS-SAML-Interactive] (https://github.com/allynl93/PS-SAML-Interactive) described on documentation page https://pspas.pspete.dev/docs/authentication/#saml-authentication is more than 3 years old and not updated anymore. As this module use old Internet explorer I think it is not a good solution in 2026.

Yes, I know there is also available an executable version but this is also 3 years old and use old webview component.

The powershell module works and the exe method end with an error message:
Invoke-PASRestMethod : [400] Authentication failure. Please contact your Administrator.

• ... $PASSession = Invoke-PASRestMethod @LogonRequest

•                                    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

I think it would be best to create a functional SAML module within this product.

[pspete]

Thanks for raising this. Short answer is that this probably isn't something psPAS itself will take on...

psPAS only ever consumes a SAML assertion, it doesn't perform the interactive IdP login itself. New-PASSession -SAMLResponse just takes whatever assertion you've already obtained and exchanges it for a session. That's the same reason Identity/ISPSS auth flows depend on the separate IdentityCommand module rather than being bundled in. Getting the actual SAML token out of a browser-based login is deliberately kept out of scope, which is why PS-SAML-Interactive exists as a separate project in the first place.

The practical reason I'd be reluctant to pull that into psPAS directly: capturing a SAML response interactively means embedding a browser control of some kind (the old IE/WebBrowser COM control that PS-SAML-Interactive uses, or a modern replacement like WebView2). That's a Windows-only dependency and it stops psPAS working the same way across Windows PowerShell 5.1 and PS7/cross-platform.
Bundling it would either compromise that or mean a Windows-only code path living inside an otherwise platform-agnostic module.

Happy to help if you want to put together (or point at) a modernized interactive SAML helper module, just think it makes sense to keep it decoupled from psPAS itself.