Questions tagged [opensso]

OpenSSO is an open source access management and federation server platform.

OpenSSO is an open source access management and federation server platform.

Oracle completed their acquisition of Sun Microsystems in February 2010 and announced that OpenSSO would no longer be their strategic product. OpenSSO will continue to be developed and supported by ForgeRock under the name of OpenAM.

145 questions
36
votes
7 answers

OpenSSO/OpenAM alternatives

Warning! I'm on a bit of a fishing trip here, and I'm not even sure if the questions that I'm asking entirely make sense. Please be kind with your responses! :) I recently took over a project that is currently based on a Java + Linux + Tomcat +…
David S
  • 12,967
  • 12
  • 55
  • 93
6
votes
2 answers

Redirect Loop Problem for Web Policy Agent?

I followed the installation guide for an Apache Web Policy Agent, but it always results in an endless redirect loop between web and application server. Firefox says "The page isn't redirecting properly" and Chrome thinks that "This webpage has a…
0x4a6f4672
  • 27,297
  • 17
  • 103
  • 140
5
votes
1 answer

Send information from one page to another with OpenSSO/AM and the get method

I have a web site protected by an OpenAm Server and accessing pages, after authentication, works fine. But when I try to redirect to a page and pass information with the get method, I obtain a forbidden access message. Is there a way to pass my…
Mike
5
votes
2 answers

Signature Validation issues using OpenSAML & OpenSSO

We are using OpenSAML on the Service Provider Site to provide SSO for our clients. Our client(ID Provider) is using OpenSSO on their end. The SAML Response being posted by OpenSSO is a little different when it comes to the signature element in that…
user464336
  • 51
  • 1
  • 5
5
votes
4 answers

Glassfish OpenSSO instructions (where to download OpenSSO)?

According to the tutorial, I should go to OpenSSO and download an "express build". However, the download links on the OpenSSO site for the "Express Build 7" appear to require logging in via an account with a paid support contract. How can one…
jsight
  • 27,819
  • 25
  • 107
  • 140
4
votes
1 answer

Integration tests for single sign-on pages

How do you test pages with single sign-on (SSO) login during integration tests (for instance by using caybara or cucumber)? For a normal login, you would write a method which visits the login page, fills out the form, and submits it. This is a bit…
0x4a6f4672
  • 27,297
  • 17
  • 103
  • 140
4
votes
3 answers

OpenAM/OpenSSO agent for JBoss EAP 6 / JBoss AS 7

I'd like to add the OpenAM/OpenSSO SSO feature to JBoss EAP 6 or JBoss AS 7. This means I must install an SSO Java EE agent on JBoss. Forgerock's OpenAM download page gives the opportunity to get agents for previous versions of JBoss, but new JBoss…
morbac
  • 301
  • 4
  • 16
4
votes
2 answers

OpenID, OpenSSO and OAuth

My understanding of OpenID is that it provides a way to have one site contain all your identity & peripheral info, but to let other OpenID-compliant (and user-trusted) sites re-use that info for identifying and authenticating the user. Essentially…
IAmYourFaja
  • 55,468
  • 181
  • 466
  • 756
3
votes
1 answer

Creating a WS-Federation Identity provider using OpenAM

We are trying to implement SSO for our .NET application deployed on Azure. We have been mandated to use openAM as the Idp. I am following instructions @ http://msdn.microsoft.com/en-us/library/gg429779.aspx. Step 3 states creating an Identity…
user179056
  • 604
  • 19
  • 36
3
votes
2 answers

OpenSSO SSOToken to SAML assertion and back

I'm considering securing a whole Java EE software platform with OpenAM (prev. Sun OpenSSO). Applications - running on WebLogic AS - would be secured by a JEE Policy Agent and web services with WS-Security SAML Token Profile. As of my understanding,…
EdouardHue
  • 33
  • 2
  • 5
3
votes
1 answer

Oracle OpenSSO Fedlet .NET Home Folder could not be found

I am trying to use the Oracle Open SSO Fedlet, I have successfully connected to the IDP using the sample app supplied with the fedlet, but then when I drop the dll in the bin dir of my app and add the config files to the App_Data directory and try…
rs82uk
  • 737
  • 2
  • 9
  • 23
2
votes
0 answers

Redirect loop when liferay integrated with OpenSSO

My softwares are: Liferay 6.0.6 with Tomocat 6.0.29, OpenSSO 9.5.2_RC1 Build 563 with tomcat 6.0.35, CentOS 6.2 Operating system Setup: I have setup both liferay and opensso on the same CenOS machine, making sure that both of its tomcat run on very…
Vinodborole
  • 165
  • 2
  • 15
2
votes
1 answer

Composing a SAML2 AuthnRequest for OpenAM

I am trying to compose a SAML2 AuthnRequest for OpenAM. I have a URL that I can perform a get against that works, but am having problems composing this into the XHTML post form. The working URL with query string…
stjohnroe
  • 3,168
  • 1
  • 27
  • 27
2
votes
2 answers

OpenSSO (OpenAM) : Turn off URL enforcement

We're using OpenAM to manage sessions on our application. The problem is everytime we're trying to pass a parameters with the GET method, the ressource is blocked (error 403 - forbidden). If no parameter is set, everything is…
esylvestre
  • 1,850
  • 4
  • 21
  • 30
2
votes
1 answer

Excluding URLs from OpenAM Tomcat Agent Filter Mapping

The default web.xml configuration for OpenAM provides a filter-mapping that includes all URI's within a site: Agent Agent SJS Access Manager Tomcat Policy…
Greymeister
  • 312
  • 4
  • 12
1
2 3
9 10