Search code examples
jbosssingle-sign-onsaml-2.0siteminder

JBOSS EAP 6 - Siteminder integration components


I need to set up JBOSS EAP6 WebApp to integrate with Siteminder with IDP initiated SAML2 artifact binding.The current integration is using Form based header authentication. Siteminder is onPrem and JBOSS/App is in AWS. I have little visibility to the siteminder set up or it's requirement to integrate to JBOSS. I have a clarity on setting up the ServiceProvider in JBOSS for SSO and Single Log out with post binding.
My question are:
1. To integrate with an OnPrem Siteminder IDM, what components other than JBOSS and it's configurations are to be present in the server hosting JBOSS?
Something like a siteminder agent to be run in the server?
From a purely JBOSS perspective ,where does the JBOSS set up boundary starts? I went through the net and could not find a conclusive list of components required to meet this integration.
2. Artifact binding is not supported by JBOSS EAP 6 per doc, so I must ask the IDM team to support SSO with post binding, correct?

Thank you in advance for your help.


Solution

  • It is picketlink that needs to be configured.Github has [examples][1]

    [1]: https://github.com/jboss-developer/jboss-picketlink-quickstarts . There is no need of siteminder agent if SP set up alone in the scope. Also IDM team has to be requested to stick to POST Binding.

    This covers the questions I asked.