Issue with WSO2 user management

Question

Using WSO2 Identity Server with SAML 2.0.

I have multiple application for that I have implemented SSO through SAML and every thing is working fine.

Problem I want to restrict some user to access of some application.

Let's say, there is 2 application and 3 users so User1 should access only App1 but not App2.

Answer 1

There's various ways to achieve this. The application controlled approach is to provide a user role to the relying party by allowing roles to be exposed as part of the SAML assertion in the service provider. The server-based approach is to create XACML policies within the server and then enabling Authorization in the service provider. The WSO2 training materials describe how this is done in the WSO IS advanced training materials available here:

https://github.com/wso2/WSO2-Training/releases/tag/IS530AA