SAML in java

[Atul Darne]

i am a beginner in java, i need to study SAML into java, please suggest some beginner guide, so i can make some small project, and implement some small modules.

[Naren Chivukula]

Hi Atul,
You can use Apache Rampart, which supports SAML 2.0. Good luck!

[Ulf Dittmer]

Rampart implies Axis, and thus web services. Instead, you may wish to check out some of the open source Java SAML implementations.

[Atul Darne]

thanks Ulf and naren,

I went through the material provided by you, understand some concepts from it, i need to design it for a simple login page on tomcat server, what should i do, and how must i proceed? please suggest and help.


thanks in advance.

[Ulf Dittmer]

How do you envision SAML to fit into the workings of a login page? Describe the security architecture to us.

[Atul Darne]

Hi Ulf,

i need to setup a identity provider (idP) and some webserver or serviceprovider (SP), and authenticate with simple java if statement (will do)
i have been reffered to this by my colleague http://en.wikipedia.org/wiki/Security_Assertion_Markup_Language and told me to develop some UI utilizing SAML between the iDP and SP.

even i tried to find out some idP but didnot get any.

[Dan Drillich]

Atul,

Do you need this authentication solution within a company or on the internet? because SAML is great on the internet while on the intranet there are some older technologies.

Regards,
Dan

[Naren Chivukula]

Hi Dan,
Thanks for chipping in. Can you be specific on what other old technologies you are referring?

Cheers,
Naren

[Atul Darne]

Hi Dan ,

I need this authentication solution within a company and on internet both. your help would be a great boon in understanding the concept for me.
currently iam understanding SAML API, but there are no examples utilizing the functions in the API. where do i get them to make some simple SAML Assertions, Request and make the Response (Manually will do i.e by using servlets and replying again with the Response. for my understanding.)

[Dan Drillich]

Naren Chivukula wrote:
Can you be specific on what other old technologies you are referring?

1. Siteminder
2. Active Directory Authentication
3. LDAPS

Difference between LDAP and Siteminder? might be helpful.

Regards,
Dan

[Kumaravadivel Subramani]

I am also searching for some sample examples from which I can start SAML 2.0 implementation for my web sites. Can somebody just point me the tutorial or sample package on this?
@Atul Darne:: Have you implemented the same?

[Kumaravadivel Subramani]

I hope the below sample package might give you some insight on SAML implementation in java.

http://code.google.com/p/google-apps-sso-sample/downloads/detail?name=sso-sample-1.0.1-java.zip&can=1&q=