Java中使用SAML2进行SSO身份验证以及如何使用HtmlUnit执行JavaScript

Question

In one of my developments (using kerberos authentication to loginalong with HtmlUnit) its working fine in all cases , facing an issue after hitting SSO authenticated links where the SAML2 used.

I have searched all the way there is no proper explanation to get more info on SAML2 authentication for SSO secured pages.

I`m completely new for SSO authentication and SAML2 authentication,is there any separate API for this? help me to know on more on this.

Could you please help or suggest what is the best process to pass the user/password to get the authentication.

Thanks

Answer 1

Authentication itself is not part of SAMLv2 specification. SAMLv2 defines the exchange of information about authenticated subjects. Authentication happens at the SAMLv2 IdP. How this happens in detail is up to the IdP. It could be that the following is possible in your case ... Use HTTP POST to send credentials to the Login URL of the IdP. Capture the session cookie returned by the IdP. Send HTTP request to the endpoint of the IdP which allows so called IdP-initiated SSO and specify 'HTTP Redirect Binding' and the Meta Alias of the SP (this is the SSO-enabled app from SAML point of view). The IdP would return a 302 , follow the redirect, the SP should consume the SAML assertion included as a query parameter and you should be able to access the SSO-enabled app.

You may read SAMLv2 tech overview ( http://docs.oasis-open.org/security/saml/Post2.0/sstc-saml-tech-overview-2.0-cd-02.html ) to get some idea.