SP Java servlet filter ?

[Adam Dong]

Scott,

Thanks for your replies, always helpful.

OpenAM 10.x is free, but anything after that is not.

Shibboleth SP requires another entity - apache server, it just adds more complexity to a product, one more component to install and monitor. 

In simpler cases, SP could be something light-weight, sending an AuthnRequest, validating the Assertion, perfect for a filter which is part the of web app it is protecting.

Thanks,
Adam

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Tuesday, December 02, 2014 12:43 PM
To: Shib Users
Subject: Re: SP Java servlet filter ?

On 12/2/14, 8:13 PM, "Adam Dong" <adamdong at vidder.com> wrote:


>
> 
>I also considered Spring SAML, but my webapp is not Spring based. Not 
>sure if I could use Spring SAML on top of non-Spring webapp ?
> 

Doubtful.

>Any other options ?

OpenAM/Forgerock perhaps.

> 
>Shibboleth is more mature, but it is missing Java SAML SP.

That's partly because the SP we have already supports Java applications quite well, and also partly because that maturity is why an SP from us is much more work than it is for people that don't implement what we do.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net