English 中文(简体)
Implementing SSO with SAML and JBoss
原标题:
  • 时间:2009-11-24 10:28:48
  •  标签:
  • jboss
  • saml

I want to implement SSO with SAML tokens in JBossAS.

The scenario is as follows.

  1. I have 2 applications app1 and app2 running on 2 JBoss instances.
  2. Login into app1 and enter username / password using form based auth.
  3. Once login, click on the link that should be redirected to the app2 page.
  4. This should use SSO with SAML tokens on JBossAS for authentication and authorization of users.

Can anyone let me know how to do this?

问题回答

I just now found your question and noticed it is still not answered. You can take a look at JBoss picketlink. Said page describes the federation support in JBoss 5+ and Tomcat 5.5+.

Supported protocols are SAML2, WS-Trust and Open ID.

Since SAML2 users Assertion after authentication, using pure SAML2 on both apps would require you to register both apps as Service Providers - I believe.

I did a workaround using JBoss/Tomcat SSO valves: My (Seam) app 1 uses SAML2 for authentication and my other apps simply reuses that Principal (username, roles) created in the first app. I believe this corresponds to your situation. Log in at app 1, security constraint in app2, no log in in app2.

I had to create a custom valve to achieve this https://github.com/jensaug/jbossweb-customsso

/Jens





相关问题
Implementing SSO with SAML and JBoss

I want to implement SSO with SAML tokens in JBossAS. The scenario is as follows. I have 2 applications app1 and app2 running on 2 JBoss instances. Login into app1 and enter username / password ...

How do you efficiently repeat an action every x minutes?

I have an application that runs in JBoss. I have an incoming web service request that will update an ArrayList. I want to poll this list from another class every 60 seconds. What would be the most ...

jsp:how to hide folder structure of website from users?

how to hide folder structure of website from users. i have developed a website on jave platform (jsp). website is deployed on jboss. suppose my website s home page url is dummy.com/dummyFolder/...

JBoss Web Services Behind IIS Through HTTPs

This is a tangled web that s woven, I suppose, but it really shouldn t be all that hard. Let me see if I can paint the picture: I have written a web service, starting with a WSDL, which is to run in ...

Flex: image scale stopped working after deploy to server

I have some code to scale an image s width according to its height after the image is being loaded. It works fine on my development PC if I point to the wrapper html using local file system path. ...

How in jboss write traces to separate trace file

How in JBoss to write traces to separate file? I would like to see traces about org.hibernate.SQL and org.hibernate.type in separate trace file. I added next appender and categories to jboss-log4j....

热门标签