This is a sample configuration of the authenticators.xml.

It contains a list of authenticator elements where each of them describes a
different authenticator. Attribute "name" is a mandatory attr which is used
to identify each of the authenticator. It is possible to disable an
installed authenticator. The optional attribute "disabled" is used for that
purpose and it defaults to 'false' if not mentioned specifically.

Each authenticator has a priority level, which is used in runtime to
identify the authenticator with the highest priority which can handle a
particular authentication request.

'Config' element is used for the authenticator specific configurations.
These configurations are given as parameter elements.

<Authenticators xmlns="http://wso2.org/projects/carbon/authenticators.xml";>

    <!-- Authenticator Configurations for TokenUIAuthenticator -->
    <Authenticator name="TokenUIAuthenticator" disabled="true">
        <priority>5</priority>
    </Authenticator>

    <!-- Authenticator Configurations for SAML2SSOAuthenticator -->
    <Authenticator name="SAML2SSOAuthenticator">
        <priority>10</priority>
        <config>
            <parameter name="LoginPage">/carbon/admin/login.jsp</parameter>
            <parameter name="ServiceProviderID">carbonServer</parameter>
            <parameter name="IdentityProviderSSOServiceURL">
https://localhost:9443/samlsso</parameter>
        </config>
    </Authenticator>

</Authenticators>


Please provide your feedback on this model.

Thanks,
Thilina

On Fri, Apr 1, 2011 at 12:02 PM, Sameera Jayasoma <[email protected]> wrote:

>
>
> On Fri, Apr 1, 2011 at 11:46 AM, Thilina Buddhika <[email protected]>wrote:
>
>> Hi Folks,
>>
>> At the moment, we have some configurations related to Carbon authenticator
>> framework scattered across multiple configuration files. For instance, all
>> the authenticator configurations and priorities are set in the carbon.xml
>> and SSO configurations are in the user-mgt.xml. Also since users can write
>> their own authenticators and plug into Carbon, we should provide a default
>> place to put their configurations.
>>
>> After an offline discussion with Azeez, we thought of introducing a new
>> config. file called 'authenticators.xml' which will be categorized as an
>> advanced configuration file. Users have to modify it only if they want to
>> use a different authentication mechanism other than the default
>> authenticator.
>>
>> WDYT ?
>>
>
> +1 for applying separation of concerns concept. Merging all authenticators
> related configurations to a single config files is better approach.
>
> Sameera
>
>>
>> Thanks,
>> Thilina
>>
>> --
>> Thilina Buddhika
>> Senior Software Engineer
>> WSO2 Inc. ; http://wso2.com
>> lean . enterprise . middleware
>>
>> phone : +94 77 44 88 727
>> blog : http://blog.thilinamb.com
>>
>> _______________________________________________
>> Carbon-dev mailing list
>> [email protected]
>> http://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev
>>
>>
>
>
> --
> Sameera Jayasoma
> Technical Lead and Product Manager, WSO2 Carbon
>
> WSO2, Inc. (http://wso2.com)
> email: [email protected]
> blog: http://tech.jayasoma.org
>
> Lean . Enterprise . Middleware
>



-- 
Thilina Buddhika
Senior Software Engineer
WSO2 Inc. ; http://wso2.com
lean . enterprise . middleware

phone : +94 77 44 88 727
blog : http://blog.thilinamb.com
_______________________________________________
Carbon-dev mailing list
[email protected]
http://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev

Reply via email to