OpenSAML3.3 Correct way to read (adfs) FederationService.xml?

[Rob Audenaerde]

Thanks Brent,

Can you (or someone else on the list) perhaps point me to a place where I
can find some resources to read about that? Like examples / documentation /
testcode / etc. I really want to understand it better and use OpenSAML
correctly, and I have a bit of a hard time googling it. And I don't want to
take all your time by just posing questions on the mailing list. (btw I
bought the 'Guide to OpenSAML3' ebook, that helped me greatly to get
started)

My interest is to implement WebSSO in my own (Wicket) application, where we
can:

a. take the IdP XML as configuration (I think I am close to getting that
working),
b. generate the SP XML (don't know how to do that yet)
c. Do the actual SSO (I have got that working in an example on OpenAM over
http, but that was all manually configured)

-Rob




On Tue, May 23, 2017 at 9:08 PM, Brent Putman <putmanb at georgetown.edu>
wrote:

>
>
> On 5/23/17 12:48 PM, Rob Audenaerde wrote:
>
> Ah I see. Thanks!
>
> Great.
>
>
> for ( EntityDescriptor idpEntityDescriptor : idpMetaDataProvider )
> {
>                     ...........
> }
>
>
> Yes, you can do that with a batch metadata resolver, since it implements
> Iterable<EntityDescriptor>.   That might be typical for a discovery
> service, etc.
>
> However, just FYI, that's not how one would typically use a metadata
> resolver in an IdP or SP scenario.  You'd use one of the resolve methods +
> a CriteriaSet to resolve the entity(ies) that you wanted, based on the
> criteria you supply.  Usually that's just entityID, so that case is pretty
> simple.
>
> What you are *usually* interested in for SSO though is actually finding
> the right RoleDescriptor for the peer with which you are communicating.
> There is a similar RoleDescriptorResolver abstraction for that.  The impl
> that we have of that simply wraps a MetadataResolver, passing the supplied
> criteria through.
>
>
>
>
>
> --
> To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20170524/12420a86/attachment-0001.html>