Uploaded image for project: 'WildFly Elytron'
  1. WildFly Elytron
  2. ELY-457

SASL SAML Authentication Mechanism

XMLWordPrintable

    • Icon: Feature Request Feature Request
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • None
    • SASL
    • None

            [ELY-457] SASL SAML Authentication Mechanism

            Jan Kalina (Inactive) added a comment -

            Added analysis document

            Jan Kalina (Inactive) added a comment - Added analysis document

            Darran Lofthouse added a comment -

            You could always get an analysis document started with the bits you do know, the bits we don't know should then be clearer for us to work out how to fill in the blanks.

            Darran Lofthouse added a comment - You could always get an analysis document started with the bits you do know, the bits we don't know should then be clearer for us to work out how to fill in the blanks.

            Jan Kalina (Inactive) added a comment -

            rhn-support-dlofthouse By specification SAML SaslServer should wait and receive HTTP call from IdP - it looks like it needs to be integrated with undertow somehow...
            Do we have some plan how to handle similar things already? Or should I postpone this until F2F too?

            The SaslServer should work by following way:

            • sasl server receive initial-response (domain name of IdP)
            • sasl server sends authentication-request
            • sasl server receive "="
            • ! sasl server waits for authentication statement from IdP over HTTP !
            • when received, sasl server sends completion message to client

            Jan Kalina (Inactive) added a comment - rhn-support-dlofthouse By specification SAML SaslServer should wait and receive HTTP call from IdP - it looks like it needs to be integrated with undertow somehow... Do we have some plan how to handle similar things already? Or should I postpone this until F2F too? The SaslServer should work by following way: sasl server receive initial-response (domain name of IdP) sasl server sends authentication-request sasl server receive "=" ! sasl server waits for authentication statement from IdP over HTTP ! when received, sasl server sends completion message to client

              Unassigned Unassigned
              darran.lofthouse@redhat.com Darran Lofthouse
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: