[CONF] Apache Syncope > [DISCUSS] SAML 2.0 Service Provider feature

[Francesco Chicchiricco (Confluence)]

Title: Message Title

Francesco Chicchiricco edited a page

[DISCUSS] SAML 2.0 Service Provider feature ... both for IdP-initiated and SP-initiated scenarios, the new SAML 2.0 SP Agent will take care of the SAML 2.0 assertion exchange with user's browser the actual assertion generation and validation is performed by invoking the Syncope Core via REST (for this reason the IdP metadata will be maintained by the Core); at the end of the process, a JWT (introduced by SYNCOPE-1035) will be returned by the Core to the SAML 2.0 SP Agent the new SAML 2.0 SP Agent will store the JWT received by the Syncope Core into the Java EE web application's session the Java EE web application will use the JWT for invoking the Syncope Core Image Added Implementation For several reasons - including the need to introduce additional library dependencies for manipulating SAML 2.0 assertions - the ideal candidate for this implementation is a new extension. ... View page • Add comment • Like

Stop watching space • Manage notifications This message was sent by Atlassian Confluence 5.8.4