Author: buildbot
Date: Wed Nov 6 09:47:56 2013
New Revision: 885608
Log:
Production update by buildbot for cxf
Modified:
websites/production/cxf/content/cache/main.pageCache
websites/production/cxf/content/fediz-idp-11.html
Modified: websites/production/cxf/content/cache/main.pageCache
==============================================================================
Binary files - no diff available.
Modified: websites/production/cxf/content/fediz-idp-11.html
==============================================================================
--- websites/production/cxf/content/fediz-idp-11.html (original)
+++ websites/production/cxf/content/fediz-idp-11.html Wed Nov 6 09:47:56 2013
@@ -255,13 +255,16 @@ $CATALINA_HOME/bin/shutdown.sh
<p>The users and passwords are configured in a Spring configuration file in
<tt>webapps/fediz-idp-sts/WEB-INF/passwords.xml</tt>. The following users are
already configured for the <em>Realm A</em> and can easily be extended.</p>
<div class="code panel" style="border-width: 1px;"><div class="codeContent
panelContent">
<script class="theme: Default; brush: xml; gutter: false"
type="syntaxhighlighter"><![CDATA[
- <util:map id="passwords">
- <entry key="alice"
- value="ecila" />
- <entry key="bob"
- value="bob" />
- <entry key="ted"
- value="det" />
+ <util:map id="REALMA">
+ <entry key="alice" value="ecila" />
+ <entry key="bob" value="bob" />
+ <entry key="ted" value="det" />
+ </util:map>
+
+ <util:map id="REALMB">
+ <entry key="ALICE" value="ECILA" />
+ <entry key="BOB" value="BOB" />
+ <entry key="TED" value="DET" />
</util:map>
]]></script>
</div></div>
@@ -295,11 +298,54 @@ $CATALINA_HOME/bin/shutdown.sh
<p>The claim id's are configured according to Section 7.5 in the specification
<a shape="rect" class="external-link"
href="http://docs.oasis-open.org/imi/identity/v1.0/identity.html";
rel="nofollow">Identity Metasystem Interoperability</a>. The mapping of claims
to a SAML attribute statement are described in Section 7.2.</p>
-<h5><a shape="rect" name="FedizIDP1.1-Applicationclaims"></a>Application
claims</h5>
+<h5><a shape="rect" name="FedizIDP1.1-IDPconfiguration"></a>IDP
configuration</h5>
+
+<p>The IDP configuration is done in the new configuration file
<tt>idp-config-<realm>.xml</tt> which is illustrated below</p>
+
+<div class="code panel" style="border-width: 1px;"><div class="codeContent
panelContent">
+<script class="theme: Default; brush: xml; gutter: false"
type="syntaxhighlighter"><![CDATA[
+ <bean id="idp-realmA"
class="org.apache.cxf.fediz.service.idp.model.IDPConfig">
+ <property name="realm" value="urn:org:apache:cxf:fediz:idp:realm-A"
/>
+ <property name="uri" value="realma" />
+ <!--<property name="hrds" value="" />--> <!-- TBD, not
defined, provide list if enabled -->
+ <property name="provideIDPList" value="true" />
+ <property name="useCurrentIDP" value="true" />
+ <property name="certificate" value="stsKeystoreA.properties" />
+ <property name="certificatePassword" value="realma" />
+ <property name="stsUrl"
value="https://localhost:9443/fediz-idp-sts/REALMA"; />
+ <property name="idpUrl"
value="https://localhost:9443/fediz-idp/federation"; />
+ <property name="supportedProtocols">
+ <util:list>
+
<value>http://docs.oasis-open.org/wsfed/federation/200706</value>
+
<value>http://docs.oasis-open.org/ws-sx/ws-trust/200512</value>
+ </util:list>
+ </property>
+ <property name="services">
+ <util:map>
+ <entry key="urn:org:apache:cxf:fediz:fedizhelloworld"
value-ref="srv-fedizhelloworld" />
+ </util:map>
+ </property>
+ <property name="authenticationURIs">
+ <util:map>
+ <entry key="default" value="/login/default" />
+ </util:map>
+ </property>
+ <property name="trustedIDPs">
+ <util:map>
+ <entry key="urn:org:apache:cxf:fediz:idp:realm-B"
value-ref="trusted-idp-realmB" />
+ </util:map>
+ </property>
+ <property name="serviceDisplayName" value="REALM A" />
+ <property name="serviceDescription" value="IDP of Realm A" />
+ </bean>
+]]></script>
+</div></div>
+
+<h5><a shape="rect"
name="FedizIDP1.1-RelyingParty%2FApplicationconfiguration"></a>Relying Party /
Application configuration</h5>
<p><em>Note: The configuration file</em> <tt><em>RPClaims.xml</em></tt>
<em>has been replaced</em></p>
-<p>The required claims per relying party are configured in the new IDP
configuration file <tt>idp-config-<realm>.xml</tt> which has been
enhanced to support other configuration parameters as well:</p>
+<p>The application related configuration like required claims are configured
in the new IDP configuration file <tt>idp-config-<realm>.xml</tt> which
has been enhanced to support other configuration parameters as well:</p>
<div class="code panel" style="border-width: 1px;"><div class="codeContent
panelContent">
<script class="theme: Default; brush: xml; gutter: false"
type="syntaxhighlighter"><![CDATA[
<bean id="srv-fedizhelloworld"
class="org.apache.cxf.fediz.service.idp.model.ServiceConfig">
@@ -334,6 +380,24 @@ $CATALINA_HOME/bin/shutdown.sh
]]></script>
</div></div>
+<h5><a shape="rect" name="FedizIDP1.1-TrustedIDPconfiguration"></a>Trusted IDP
configuration</h5>
+
+<p>This feature is new in Fediz IDP 1.1 and allows to redirect a SignIn
Request to a trusted IDP. The following configuration is required:</p>
+
+<div class="code panel" style="border-width: 1px;"><div class="codeContent
panelContent">
+<script class="theme: Default; brush: java; gutter: false"
type="syntaxhighlighter"><![CDATA[
+ <bean id="trusted-idp-realmB"
class="org.apache.cxf.fediz.service.idp.model.TrustedIDPConfig">
+ <property name="realm" value="urn:org:apache:cxf:fediz:idp:realm-B"
/>
+ <property name="url"
value="https://localhost:12443/fediz-idp-remote/federation"; />
+ <property name="certificate" value="realmb.cert" />
+ <property name="trustType" value="PEER_TRUST" />
+ <property name="protocol"
value="http://docs.oasis-open.org/wsfed/federation/200706"; />
+ <property name="federationType" value="FederateIdentity" />
+ <property name="name" value="REALM B" />
+ <property name="description" value="IDP of Realm B" />
+ </bean>
+]]></script>
+</div></div>
<h3><a shape="rect" name="FedizIDP1.1-ConfigureLDAPdirectory"></a>Configure
LDAP directory</h3>
