WebLogic and SAML

Thu Oct 1 06:12:55 UTC 2020

Hi,

You can try to enable debug traces in weblogic

weblogic.security.saml
weblogic.security.saml2

Enviorment->Servers->Your Managed Server->debug Tab

Regards

De: users <users-bounces at shibboleth.net> En nombre de Yeargan, Yancey
Enviado el: miércoles, 30 de septiembre de 2020 23:17
Para: Shib Users <users at shibboleth.net>
Asunto: WebLogic and SAML

I wonder if someone may be willing to help us out. Our PeopleSoft team was asked to do a proof of concept for SSO. That team asked me for help with configuring the SAML part. I have plenty of experience with Apache and IIS, but have no previous experience with WebLogic.

We attempted to follow the Oracle WebLogic server docs here.

https://ddec1-0-en-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=https%3a%2f%2fdocs.oracle.com%2fen%2fmiddleware%2ffusion%2dmiddleware%2fweblogic%2dserver%2f12.2.1.4%2fsecmg%2fsaml.html&umid=cec5108f-02a0-47cd-8b60-0af29e82325e&auth=1c980b950b810d2ebe959a136e6fc6796ec23183-2ffd73a7dad1f9f46dd606b80615c000e6bc7b9f

We also referred to the following article.

https://ddec1-0-en-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=https%3a%2f%2fmedium.com%2f%40donaldlika%2fsingle%2dsign%2don%2dweblogic%2dconfiguration%2dservice%2dprovider%2dinitiated%2dusing%2dsaml2%2das%2dprotocol%2d5af293f76321&umid=cec5108f-02a0-47cd-8b60-0af29e82325e&auth=1c980b950b810d2ebe959a136e6fc6796ec23183-788442d6926a0194fa996b94ac7d48051d47f00b

We think we configured the WebLogic SAML SP properly. We did get a metadata file from it, and configured that in our Shibboleth Identity Provider. We also think we have the IdP configured in WebLogic, so that it should trust our IdP.

However, we have been unable to get WebLogic to intercept a web request -- to redirect the web browser to the IdP. Also, the WebLogic SP's Assertion Consumer Service URL returns an HTTP 404 response. I've tried IdP-initiated SSO, and get a 404 from WebLogic.

If we can get WebLogic to process a SAML authentication response and put the SAML attributes into HTTP request headers, we feel confident we can proceed from there.

I feel we are missing something obvious and just not seeing it. Is there some trick to get WebLogic to start functioning as a SAML service provider? Despite all our configuration, it seems to be waiting for Captain Picard to give the "Engage!" command.

I am aware this is not directly Shibboleth related, but we would be grateful if someone would be willing to point us in the correct direction.

Yancey Yeargan
IT Manager
IT Shared Services
________________________________
UNIVERSITY OF NORTH TEXAS SYSTEM
Office: 940.369.7521

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20201001/a29abe11/attachment.htm>