java - Single instance of PicketLink for multiple applications -


my intention implement picketlink similar atlassian has done in crowd.

in more detail, want single picketlink instance provide authentication, authorization, sso , idm services multiple java ee applications. point here have single place jpa/ldap configuration, custom idm model , custom authenticators (all above shared between client applications).

as far i've learned documentation, picketlink doesn't offer out of box. imagine client applications using picketlink apis, actual calls being proxied master picketlink instance via rmi/hessian/rest etc. appreciate expert opinion on whether architecture viable, other criticisms , suggestions.

you looking saml

saml xml-based, open-standard data format exchanging authentication , authorization data between parties, in particular, between identity provider , service provider.

picketlink supports saml

you can create picktlink instance (basically javaee app) acts identity provider. instance " ... single place jpa/ldap configuration, custom idm model , custom authenticators ". other javaee applications act service providers. these apps can consume saml-based identity service provided identity provider:

saml

some remarks:

  • there open source or proprietary identity providers can use shibboleth
  • saml uses http underlying protocol
  • saml more or less universal. kinds of technologies can use saml. not limited java.
  • from security standpoint it's better use well-known, well-established technologies instead of writing own. saml well-known. writing own identity provider risky.

Comments

Post a Comment

Popular posts from this blog

angularjs - ADAL JS Angular- WebAPI add a new role claim to the token -

i have created angular spa webapi backend using adal js authentication.as there no roles in ad, need manually add role claims in order give users access different api controllers. the roles stored in database. expecting inject claim through call webapi after authentication ad. webapi code might this. identity.addclaim(new claim("role", "user")); var ticket = new authenticationticket(identity, props); var accesstoken = startup.oauthbeareroptions.accesstokenformat.protect(ticket); is possible replace adal idtoken new token? is viable solution or there other better way handle this? as initial token generated azuread, possible edit token add new claim? appreciated. graph api supporting group claims. see here: http://justazure.com/azure-active-directory-part-4-group-claims/ if @ examples on page, users assigned groups , app can check group in claims. in current version of portal, need app manifest , modify it.
Read more

php - CakePHP HttpSockets send array of paramms -

i problem when make request (i can request). $link = 'http://uri/path/?param1=1&sid=2&sid=3&sid=4' $http = $httpsocket = new httpsocket(); $res = $httpsocket->get($link); if check request pr($http); i see : [line] => /url/path/?param1=1&sid%5b0%5d=2&sid%5b1%5d=3&sid%5b2%5d=4 http/1.1 and i'm getting empty response because server doesn't know parameters sid%5b0%5d=2 when try send parameters array : $data = array('param1' => '1', 'sid' => array('2','3', '4')); i see same changes %5b0%5d - additional indexes. how fix it? unfortunately , can not change server side, if send request in browser, i'll normal response in json format. when make request, can parameters this: $param1 = $_get['param1']; $sid= $_get['sid']; tip: use diferente names parameters. have multiples sid. use sid1, sid2, sid3... update: can parameters this:
Read more

node.js - Using Node without global install -

i'm working on few node & electron (atom shell) projects , i'm curious how them work without user having install node globally. i've seen few applications including node directory in project contains node.exe binary. how go setting node project use binary? edit: thought should add, i've searched everywhere answer this, unrelated results.
Read more