用于签署证书的SAML样本身份提供者证书和Java应用程序

Question

I have a Java web application. And I want to implement SAML SSO login for my application. What I am trying to do is,

1. Need one sample identity provider certificate
2. Create a separate JSP application which will sign certificate and create assertion for my app.
3. Upload the public key of the certificate and save in keystore.
4. Whenever a user tries to login, the assertion from JSP application will be created and send to my web app.
5. Validate the public key with the key in keystore and proceed further.

Please correct me if I am wrong in this.

Also where can I find a sample identity provider certificate? Or may be how to create one? Also is there any sample JSP application that can create assertion and send to my application?

Thanks.

Answer 1

You can get free account at PingOne from Ping Identity .

After that you will be provided with certificate and meta information to use PingOne as identity provider.

Also you can try TestShib or OpenIdP .

You can use keytool command to manage certificates at your local system.

If you use JBoss AS/Wildfly then I suggest using Picketlink, you can find documentation here .