Skip to content

Instantly share code, notes, and snippets.

@anilsaldhana
Last active December 27, 2015 09:59
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save anilsaldhana/7307915 to your computer and use it in GitHub Desktop.
Save anilsaldhana/7307915 to your computer and use it in GitHub Desktop.
Description of the design for the Undertow SAML Authenticators using PicketLink
PicketLink has SAML Authenticators/Valves for JBossWeb/Tomcat.
Starting WildFly 8, there is a new web container called as Undertow.
PicketLink has to create authenticators/Valves for the IDP and SP that work with Undertow.
==================================
Important Requirements:
==================================
- Startup
* Configuration has to be pluggable and dynamic
* Schema can be updated to v2.5 so that additional elements can be added
* Events : UpdateConfigurationEventNotification
- General Processing
* Use of SAML2 Handlers
* Use of W3C Document for request/response for XML Signature/Encryption.
- Request Processing at IDP
* Allow seamless failover to REDIRECT profile in the absence of POST binding being used by SP
- Service Providers
* Separate Authentication Mechanisms that fall back to each of FORM, BASIC, CLIENT-CERT and DIGEST
================
JIRA Issues
================
https://issues.jboss.org/browse/PLINK-318
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment