Re: [DISCUSS] SAML 2.0 Service Provider feature

2017-03-31 Thread Francesco Chicchiriccò
After discussing with Colm on IRC, I went ahead and merged the PR. Regards. On 30/03/2017 14:30, Francesco Chicchiriccò wrote: On 30/03/2017 11:42, Colm O hEigeartaigh wrote: Hi Francesco, Good work! Thanks sir :-) A few questions for you: a) Is there any documentation available on how to

Re: [DISCUSS] SAML 2.0 Service Provider feature

2017-03-30 Thread Francesco Chicchiriccò
On 30/03/2017 11:42, Colm O hEigeartaigh wrote: Hi Francesco, Good work! Thanks sir :-) A few questions for you: a) Is there any documentation available on how to set this up for a Syncope deployment? I'll give it a try once there is. There is something in the (updated) reference guide:

Re: [DISCUSS] SAML 2.0 Service Provider feature

2017-03-30 Thread Colm O hEigeartaigh
Hi Francesco, Good work! A few questions for you: a) Is there any documentation available on how to set this up for a Syncope deployment? I'll give it a try once there is. b) Does the code support both the "RP" and "IdP" initiated flows? Both would be useful, although we could always add the othe

Re: [DISCUSS] SAML 2.0 Service Provider feature

2017-03-28 Thread Francesco Chicchiriccò
Hi all, I have just submitted the PR #45 containing my work for SYNCOPE-1041: it basically introduces a new extension which allows to: 1. import IdP metadata and configure mapping to match internal users (also via admin console) 2. export SP metadata 3. enable Admin Console and Enduser to per

Re: [DISCUSS] SAML 2.0 Service Provider feature

2017-03-07 Thread Francesco Chicchiriccò
On 07/03/2017 17:19, Colm O hEigeartaigh wrote: Hi Francesco, It's good to see support for SAML coming to Syncope. I'd encourage you to re-use the functionality developed in CXF to validate the SAML Response from the IdP: https://github.com/apache/cxf/blob/master/rt/rs/security/sso/saml/src/mai

Re: [DISCUSS] SAML 2.0 Service Provider feature

2017-03-07 Thread Colm O hEigeartaigh
Hi Francesco, It's good to see support for SAML coming to Syncope. I'd encourage you to re-use the functionality developed in CXF to validate the SAML Response from the IdP: https://github.com/apache/cxf/blob/master/rt/rs/security/sso/saml/src/main/java/org/apache/cxf/rs/security/saml/sso/SAMLPro

Re: [DISCUSS] SAML 2.0 Service Provider feature

2017-03-07 Thread Sergey Beryozkin
Hi Francesco On 07/03/17 11:00, Francesco Chicchiriccò wrote: On 07/03/2017 11:56, Sergey Beryozkin wrote: Hi Francesco Not sure if it can be relevant for this work but at the CXF level we have this SAML SP support: http://cxf.apache.org/docs/saml-web-sso.html, something Colm and myself worke

Re: [DISCUSS] SAML 2.0 Service Provider feature

2017-03-07 Thread Francesco Chicchiriccò
On 07/03/2017 11:56, Sergey Beryozkin wrote: Hi Francesco Not sure if it can be relevant for this work but at the CXF level we have this SAML SP support: http://cxf.apache.org/docs/saml-web-sso.html, something Colm and myself worked upon earlier on. Thanks for the pointer, Sergey: I did al

Re: [DISCUSS] SAML 2.0 Service Provider feature

2017-03-07 Thread Sergey Beryozkin
Hi Francesco Not sure if it can be relevant for this work but at the CXF level we have this SAML SP support: http://cxf.apache.org/docs/saml-web-sso.html, something Colm and myself worked upon earlier on. Sergey On 07/03/17 10:49, Francesco Chicchiriccò wrote: Hi all, I have made a proposal

[DISCUSS] SAML 2.0 Service Provider feature

2017-03-07 Thread Francesco Chicchiriccò
Hi all, I have made a proposal at [1] and opened SYNCOPE-1041 for the purpose. I am already working on it, and it should be ready on time for Syncope 2.0.3. The idea is to embed the whole implementation in a PR, with option of further discussing before merge. Also, I would like to include,