How does SAML work in relation to an application that is not a service provider? -


so i'm struggling bit basics of flow of saml. here's scenario find confusing.

i have java web application. user logged in. know want order cookies 3rd party because they've clicked on "i want chocolate chip cookies" link. know "mrs. pillsbury cookies co." "service provider" because sent me meta-data , i've registered gluu server (idp). i've sent idp meta-data we've done whole hand-shaking thing.

my question is...how send samlresponse mrs. pillsbury? she's given me soap endpoint waiting samlresponse. how tell java application xml gluu server samlreponse can pass pillsbury soap endpoint? that's part i'm stuck...i don't know how response forward. can see in metadata there lots of sso endpoints

    <singlesignonservice binding="urn:mace:shibboleth:2.0:profiles:authnrequest" location="https://idp.myjavaapp.com/idp/profile/saml2/unsolicited/sso"/>     <singlesignonservice binding="urn:oasis:names:tc:saml:2.0:bindings:http-post" location="https://idp.myjavaapp.com/idp/profile/saml2/post/sso"/>     <singlesignonservice binding="urn:oasis:names:tc:saml:2.0:bindings:http-post-simplesign" location="https://idp.myjavaapp.com/idp/profile/saml2/post-simplesign/sso 

am supposed hit 1 of sso endpoints , it'll generate response can forward on pillsbury? can 1 of saml experts out there me straigtened out? in advance.

there few ways saml requests/responses can generated.

idp initiated:

this saml response generated w/o saml request. requires user login/be logged idp , idp generate saml response based off sp setup in idp.

sp initiated:

this http redirect can post well. saml request redirect/post gets sent idp based of link or button on sp's website.


Comments

Popular posts from this blog

How has firefox/gecko HTML+CSS rendering changed in version 38? -

javascript - Complex json ng-repeat -

jquery - Cloning of rows and columns from the old table into the new with colSpan and rowSpan -