Re: Ofbiz integration with Azure AD SSO

2020-03-25 Thread Jacques Le Roux
Hi Vipin, I don't know anything about Azure SSO and the documentation is sparse. It's based on a federation like SAML[2], but according to [1] it has not been tested with SAML. If it was you could have used Shibboleth[3]. You could try at your own risk (spend money for nothing), nothing is guar

Re: Ofbiz integration with Azure AD SSO

2020-03-25 Thread Jason RJ
It might also be worth taking a look at the Microsoft Azure AD Integration guide [1] for general guidance on integrating with a Java app. Sample code is included. Jason [1] https://docs.microsoft.com/en-us/samples/azure-samples/active-directory-java-webapp-openidconnect/integrating-azure-ad-in

Re: Ofbiz integration with Azure AD SSO

2020-03-25 Thread vipin nirwal
Thanks Jacques and Jason. I will go through as recommended by both of you. Will share if i found some other way. Thanks, Vipin On Wed, Mar 25, 2020 at 4:22 PM Jason RJ wrote: > It might also be worth taking a look at the Microsoft Azure AD Integration > guide [1] for general guidance on integra

Re: Ofbiz Encryption Model and Key Rotation

2020-03-25 Thread Jacques Le Roux
Hi Pratyush, If you look at https://demo-trunk.ofbiz.apache.org/webtools/control/entity/find/EntityKeyStore you will see the Key Names. Those are the keys you are looking for. The Key Texts are the field values encrypted. Yes, OOTB, AES is used with a 256-bit key length. By default OFBiz uses

Re: Ofbiz Encryption Model and Key Rotation

2020-03-25 Thread Jacques Le Roux
I think I was not clear enough. If you want to understand how it works have a look at GenericDelegator::decryptFieldValue. In few words: a Key Name corresponds to an Entity Name encrypted. A Key Text is the value of a field of this Entity encrypted. You may try to modify the value of an encryp