Service provider implementation using OPEN SAML - JAVA

java security saml-2.0 opensaml
mavis picture mavis · Jan 16, 2014 · Viewed 12.8k times · Source

After many analysis, Figured out that SAMLV2.0 is providing excellent service in exchanging data between the security web domains.

My scenario is I am trying to implement Service Provider(SP) using Shibboleth's new OPEN SAML-JAVA http://shibboleth.net/products/opensaml-java.html .

I have read about ton of documents about the SAML http://en.wikipedia.org/wiki/Security_Assertion_Markup_Language and its components.Still found no document useful in Service provider implementation steps.

Can anyone help me in where to start and what are the steps needed to implement my SP in generally?

Also if there is any sample documentation for open-saml - java is appreciated .

In the implementation, When to generate MetaData(the one which has to agreed upon between the SP and IdP)?

And also Should I only use TestShib https://www.testshib.org/index.html as the testing IdP , Since I am using Shibboleth's OPEN SAML -JAVA library? Is there any other test platform available , Can u suggest me ?

Thank you in advance.

Answer

mavis picture mavis · Jan 20, 2014

Documentation/Explanation sites

1.OPEN SAML JAVA Library

https://wiki.shibboleth.net/confluence/display/OpenSAML/OSTwoUserManual

2.MetaData:

https://wiki.shibboleth.net/confluence/display/SHIB2/Metadata

Related questions

SAML simple example for beginners

I am beginner to the SAML v2.0 technology and I get the theory knowledge but I didn't find any examples on Google. Can anybody provide me with a step by step example for simple "SAML for v2.0". Upto now I've …

Read More
Java Error: "Your security settings have blocked a local application from running"

I'm trying to run this simple HelloWorld code written in Java from my browser (Chrome): public class HelloWorld extends JApplet { public void init() { try { SwingUtilities.invokeAndWait(new Runnable() { public void run() { JLabel lbl = new JLabel("Hello World"); add(lbl); } }); } catch (…

Read More
Why is char[] preferred over String for passwords?

In Swing, the password field has a getPassword() (returns char[]) method instead of the usual getText() (returns String) method. Similarly, I have come across a suggestion not to use String to handle passwords. Why does String pose a threat to …

Read More