I have been looking all over for an example of connecting to Active Directory 
Federation Services.  Has anyone successfully implemented this with SAML 2.0?

Our ADFS has a Common Access Card PKI tie-in, so I'm trying to leverage it to 
have Knox pointed to ADFS and Ambari set up as SSO to Knox.  Ultimately, when 
someone tries to connect to Ambari, it will request the PIN from the CAC 
certificate, do an ADFS lookup in Active Directory, and send back a SAML token 
of success or failure.  Possibly some other pieces of information to help tie 
that AD username into the Hadoop cluster.

VR, N


Reply via email to