Go to Google Groups Home    ESOE Users
Re: [esoe-users] Re: How to SAML enable my JSP based application

Bradley Beddoes <bedd...@intient.com>

Hello,

elyas wrote:
> Hi,

> Need one calrification -

> I am doing the setup with 2 different app server instanace(one with
> tomcat for idp and the other with jboss for SPEP)

> I could do the basic setup for tomcat instance.

> 1) What components do i need to install on jboss SPEP side??
> esoemanager, spep anything else??

I assume you mean you want to only run the core ESOE service on the
tomcat instance?. If so yes you'll need to put ESOE Manager and a SPEP
instance on JBoss.

Normally we'd see most deployments putting the ESOE core service and
ESOE Manager (plus it's SPEP) on the one Tomcat. Other SPEP instances
can then be deployed for applications as needed.

> 2) Do i need to do any configuration? if so how to do that??

ESOE Startup as per normal, take care to insert correct URLS for the
different servers hosting ESOE core and ESOE Manager if you choose to go
this path.

> 3) Basically I am looking for the components need to be installed on
> spep side and need more clarity on how the redirection happens from
> spep machine to idp machine??

For a standalone application you just setup the Java SPEP code or the
Apache/IIS spep code along with the app. Then goto ESOE Manager and
register a new service instance which gives you the configuration
details, crypto etc to apply to that specific SPEP install.

Redirection is browser based via GETS and POSTS, browser hits the app
which is spep protected, spep sees no session, redirects you to ESOE
which creates a session, redirects back to SPEP which creates an
application level session and then directs the browser into the
application itself.

Under the covers there are also several web service calls between SPEP
and ESOE for data exchange.

HTH

Bradley

> ( Really Sorry - Couldn't get some finer details from java spep
> installation guide)

> Regards,
> Elyas

> On Sep 25, 2:56 am, Bradley Beddoes <bedd...@intient.com> wrote:
>> Hi,
>> The easiest method is to deploy the Java SPEP and SPEP filter which is
>> the client side code you can use to handle all communication with the
>> central ESOE deployment on your behalf.

>> This takes care of all redirections, authentication, attribute exchange
>> and policy enforcement. You then simply need to write what we call an
>> "integrator" which is usually just another filter in your webapp to
>> translate details to a format your application is expecting.

>> Install doco here:http://esoeproject.org/confluence/display/eu/Java+SPEP+Installation+G...

>> Example integrators we supply:http://svn.esoeproject.org/repos/esoe/trunk/spepintegrators/

>> regards,
>> Bradley
>> --
>> Bradley Beddoes
>> Lead Software Architect
>> Intient Pty Ltd

>> http://www.intient.com

>> elyas wrote:
>>> Dear All,
>>> I have a JSP application which need to be SAML enabled.
>>> Whenever my application URL is accessed I could redirect to eso login
>>> page and redirect back to the original application page. However i
>>> couldn't do anything further bacuse of lacl of knowledge.
>>> 1 )What do I need to include in my application code to enable SAML
>>> behaviour.
>>> 2) How to make the idp/SAML to understand about my application
>>> session.
>>> Thanks,
>>> Elyas

>>  beddoes.vcf
>> < 1KViewDownload

--
Bradley Beddoes
Lead Software Architect
Intient Pty Ltd

http://www.intient.com

  beddoes.vcf
< 1K Download