Hi Ushani,

I think these are the correct ways to do this. I don't think you need to do
any config for resident IDP.

*Use Case 1 *

travelocity sample --> IS (the protocol is SAML)
IS --> External IDP (any external IDP that supports OpenIDConnect/OAuth) -
You can use Facebook federated authenticator here (or another IS)



*Use Case 2*
playground sample --> IS (the protocol is OAuth)
IS --> External IDP (any external IDP that supports SAML) - You can use
salesforce for this (or another IS)

Thanks,
TharinduE


On Tue, Nov 14, 2017 at 11:45 AM, Ushani Balasooriya <[email protected]>
wrote:

> Hi IAM Team,
>
> I am trying to implement a sample using travelocity web app which can be
> configured for identity federation between sp and IDP with incompatible
> Identity federation protocols.
>
> My Pattern is "*Identity federation between service providers and
> identity providers with incompatible identity federation protocols*" as
> mentioned in Solution 11 of this blog post [1].
>
> In order to try this I need to find out the correct and valid use cases.
>
> Use Case 1 - Configure travelocity web app as a SP which uses SAML and
>  WSO2 IS resident IDP which uses Oauth. - This is Valid obviously and
> curently I  have configured it as explained in our documents.
>
>
> My question is on Use Case 2.
>
> *Use case 2* - Configure a service provider which uses Oauth and IDP
> which uses SAML.
>
> I feel above use case is not valid.
>
> Please correct me if I am wrong. If the use case 2 is valid, please
> explain me it with a valid scenario which uses Oauth as SP and SAML as IDP.
>
> If the above use case2 is not valid, can you please let me know what are
> the possible and valid use cases which are relevant for the pattern
> mentioned in the blog considering the different protocols such as SAML,
> Oauth, Passive STS.
>
> [1] https://medium.facilelogin.com/thirty-solution-patterns-with-the-
> wso2-identity-server-16f9fd0c0389
>
> Appreciate your response.
>
> Thanks,
> --
> *Ushani Balasooriya*
> Associate Technical Lead - EE;
> WSO2 Inc; http://www.wso2.com/.
> Mobile; +94772636796
>
>


-- 

Tharindu Edirisinghe
Senior Software Engineer | WSO2 Inc
Platform Security Team
Blog : http://tharindue.blogspot.com
mobile : +94 775181586
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to