You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cxf.apache.org by bu...@apache.org on 2013/11/06 10:47:56 UTC
svn commit: r885608 - in /websites/production/cxf/content:
cache/main.pageCache fediz-idp-11.html
Author: buildbot
Date: Wed Nov 6 09:47:56 2013
New Revision: 885608
Log:
Production update by buildbot for cxf
Modified:
websites/production/cxf/content/cache/main.pageCache
websites/production/cxf/content/fediz-idp-11.html
Modified: websites/production/cxf/content/cache/main.pageCache
==============================================================================
Binary files - no diff available.
Modified: websites/production/cxf/content/fediz-idp-11.html
==============================================================================
--- websites/production/cxf/content/fediz-idp-11.html (original)
+++ websites/production/cxf/content/fediz-idp-11.html Wed Nov 6 09:47:56 2013
@@ -255,13 +255,16 @@ $CATALINA_HOME/bin/shutdown.sh
<p>The users and passwords are configured in a Spring configuration file in <tt>webapps/fediz-idp-sts/WEB-INF/passwords.xml</tt>. The following users are already configured for the <em>Realm A</em> and can easily be extended.</p>
<div class="code panel" style="border-width: 1px;"><div class="codeContent panelContent">
<script class="theme: Default; brush: xml; gutter: false" type="syntaxhighlighter"><![CDATA[
- <util:map id="passwords">
- <entry key="alice"
- value="ecila" />
- <entry key="bob"
- value="bob" />
- <entry key="ted"
- value="det" />
+ <util:map id="REALMA">
+ <entry key="alice" value="ecila" />
+ <entry key="bob" value="bob" />
+ <entry key="ted" value="det" />
+ </util:map>
+
+ <util:map id="REALMB">
+ <entry key="ALICE" value="ECILA" />
+ <entry key="BOB" value="BOB" />
+ <entry key="TED" value="DET" />
</util:map>
]]></script>
</div></div>
@@ -295,11 +298,54 @@ $CATALINA_HOME/bin/shutdown.sh
<p>The claim id's are configured according to Section 7.5 in the specification <a shape="rect" class="external-link" href="http://docs.oasis-open.org/imi/identity/v1.0/identity.html" rel="nofollow">Identity Metasystem Interoperability</a>. The mapping of claims to a SAML attribute statement are described in Section 7.2.</p>
-<h5><a shape="rect" name="FedizIDP1.1-Applicationclaims"></a>Application claims</h5>
+<h5><a shape="rect" name="FedizIDP1.1-IDPconfiguration"></a>IDP configuration</h5>
+
+<p>The IDP configuration is done in the new configuration file <tt>idp-config-<realm>.xml</tt> which is illustrated below</p>
+
+<div class="code panel" style="border-width: 1px;"><div class="codeContent panelContent">
+<script class="theme: Default; brush: xml; gutter: false" type="syntaxhighlighter"><![CDATA[
+ <bean id="idp-realmA" class="org.apache.cxf.fediz.service.idp.model.IDPConfig">
+ <property name="realm" value="urn:org:apache:cxf:fediz:idp:realm-A" />
+ <property name="uri" value="realma" />
+ <!--<property name="hrds" value="" />--> <!-- TBD, not defined, provide list if enabled -->
+ <property name="provideIDPList" value="true" />
+ <property name="useCurrentIDP" value="true" />
+ <property name="certificate" value="stsKeystoreA.properties" />
+ <property name="certificatePassword" value="realma" />
+ <property name="stsUrl" value="https://localhost:9443/fediz-idp-sts/REALMA" />
+ <property name="idpUrl" value="https://localhost:9443/fediz-idp/federation" />
+ <property name="supportedProtocols">
+ <util:list>
+ <value>http://docs.oasis-open.org/wsfed/federation/200706</value>
+ <value>http://docs.oasis-open.org/ws-sx/ws-trust/200512</value>
+ </util:list>
+ </property>
+ <property name="services">
+ <util:map>
+ <entry key="urn:org:apache:cxf:fediz:fedizhelloworld" value-ref="srv-fedizhelloworld" />
+ </util:map>
+ </property>
+ <property name="authenticationURIs">
+ <util:map>
+ <entry key="default" value="/login/default" />
+ </util:map>
+ </property>
+ <property name="trustedIDPs">
+ <util:map>
+ <entry key="urn:org:apache:cxf:fediz:idp:realm-B" value-ref="trusted-idp-realmB" />
+ </util:map>
+ </property>
+ <property name="serviceDisplayName" value="REALM A" />
+ <property name="serviceDescription" value="IDP of Realm A" />
+ </bean>
+]]></script>
+</div></div>
+
+<h5><a shape="rect" name="FedizIDP1.1-RelyingParty%2FApplicationconfiguration"></a>Relying Party / Application configuration</h5>
<p><em>Note: The configuration file</em> <tt><em>RPClaims.xml</em></tt> <em>has been replaced</em></p>
-<p>The required claims per relying party are configured in the new IDP configuration file <tt>idp-config-<realm>.xml</tt> which has been enhanced to support other configuration parameters as well:</p>
+<p>The application related configuration like required claims are configured in the new IDP configuration file <tt>idp-config-<realm>.xml</tt> which has been enhanced to support other configuration parameters as well:</p>
<div class="code panel" style="border-width: 1px;"><div class="codeContent panelContent">
<script class="theme: Default; brush: xml; gutter: false" type="syntaxhighlighter"><![CDATA[
<bean id="srv-fedizhelloworld" class="org.apache.cxf.fediz.service.idp.model.ServiceConfig">
@@ -334,6 +380,24 @@ $CATALINA_HOME/bin/shutdown.sh
]]></script>
</div></div>
+<h5><a shape="rect" name="FedizIDP1.1-TrustedIDPconfiguration"></a>Trusted IDP configuration</h5>
+
+<p>This feature is new in Fediz IDP 1.1 and allows to redirect a SignIn Request to a trusted IDP. The following configuration is required:</p>
+
+<div class="code panel" style="border-width: 1px;"><div class="codeContent panelContent">
+<script class="theme: Default; brush: java; gutter: false" type="syntaxhighlighter"><![CDATA[
+ <bean id="trusted-idp-realmB" class="org.apache.cxf.fediz.service.idp.model.TrustedIDPConfig">
+ <property name="realm" value="urn:org:apache:cxf:fediz:idp:realm-B" />
+ <property name="url" value="https://localhost:12443/fediz-idp-remote/federation" />
+ <property name="certificate" value="realmb.cert" />
+ <property name="trustType" value="PEER_TRUST" />
+ <property name="protocol" value="http://docs.oasis-open.org/wsfed/federation/200706" />
+ <property name="federationType" value="FederateIdentity" />
+ <property name="name" value="REALM B" />
+ <property name="description" value="IDP of Realm B" />
+ </bean>
+]]></script>
+</div></div>
<h3><a shape="rect" name="FedizIDP1.1-ConfigureLDAPdirectory"></a>Configure LDAP directory</h3>