<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Helvetica Neue";
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
p.p1, li.p1, div.p1
{mso-style-name:p1;
margin:0in;
font-size:9.0pt;
font-family:"Helvetica Neue",serif;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">FWIW, some time in the past, I did a large multi-institution integration of just this type. We did not use the weblogic SAML SP, but instead proxied weblogic through apache and the oracle weblogic connector
and used the shib SP in apache. It did great and, as far as I know, it’s still running to this day…<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">HTH,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt">
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt">From:</span></b><span style="font-size:11.0pt"> users <users-bounces@shibboleth.net>
<b>On Behalf Of </b>Yeargan, Yancey<br>
<b>Sent:</b> Wednesday, September 30, 2020 4:17 PM<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Subject:</b> WebLogic and SAML<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">I wonder if someone may be willing to help us out. Our PeopleSoft team was asked to do a proof of concept for SSO. That team asked me for help with configuring the SAML part. I have plenty of experience with
Apache and IIS, but have no previous experience with WebLogic.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">We attempted to follow the Oracle WebLogic server docs here.<o:p></o:p></span></p>
<p class="p1"><a href="https://docs.oracle.com/en/middleware/fusion-middleware/weblogic-server/12.2.1.4/secmg/saml.html">https://docs.oracle.com/en/middleware/fusion-middleware/weblogic-server/12.2.1.4/secmg/saml.html</a><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">We also referred to the following article.<o:p></o:p></span></p>
<p class="p1"><a href="https://medium.com/@donaldlika/single-sign-on-weblogic-configuration-service-provider-initiated-using-saml2-as-protocol-5af293f76321">https://medium.com/@donaldlika/single-sign-on-weblogic-configuration-service-provider-initiated-using-saml2-as-protocol-5af293f76321</a><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">We think we configured the WebLogic SAML SP properly. We did get a metadata file from it, and configured that in our Shibboleth Identity Provider. We also think we have the IdP configured in WebLogic, so that
it should trust our IdP.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">However, we have been unable to get WebLogic to intercept a web request -- to redirect the web browser to the IdP. Also, the WebLogic SP's Assertion Consumer Service URL returns an HTTP 404 response. I've
tried IdP-initiated SSO, and get a 404 from WebLogic.<o:p></o:p></span></p>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">If we can get WebLogic to process a SAML authentication response and put the SAML attributes into HTTP request headers, we feel confident we can proceed from there.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">I feel we are missing something obvious and just not seeing it. Is there some trick to get WebLogic to start functioning as a SAML service provider? Despite all our configuration, it seems to be waiting for
Captain Picard to give the "Engage!" command.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">I am aware this is not directly Shibboleth related, but we would be grateful if someone would be willing to point us in the correct direction.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.5pt;color:black">Yancey Yeargan</span></b><span style="font-size:10.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;color:black">IT Manager</span><span style="font-size:10.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;color:black">IT Shared Services</span><span style="font-size:10.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;color:black">________________________________</span><span style="font-size:10.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.5pt;color:#059033">UNIVERSITY OF NORTH TEXAS SYSTEM</span></b><span style="font-size:10.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.5pt;color:black">Office:</span></b><span style="font-size:10.5pt;color:black"> 940.369.7521</span><span style="font-size:10.0pt;color:black"><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</body>
</html>