SAML Configuration on AS Java

[Former Member]

Hi All,

Has any anyone configured SAML on SAP AS Java.

We need to configure SAML on AS Java for providing SSO to an external system. Hence the SAP AS Java would be the "Service Provider". The team related to the external system are asking for details such as

1) How would the SAML request to SAP AS Java look like? What all parameters would be present in SAML request/assertion?

2) How will the SAML response from SAP AS Java look like? What all parameters would they receive back?

3) What will be the SAML error codes?

4) How will the request timeout be handled?

We were not able to get much info for these queries from net. Any help in this regard would be greatly appreciated.

Thanks in adavance.

[Former Member]

Hi Suresh,

SAML generally involves in exchanging of tokens which are nothing but SAML tokens. Generally we have different types security and authentication services based on certificates,profiles and username/passwords.

Broadly these are classified into two:

Message level - deals every thing in the form of messages

Transport level- would be in the form of transport request.

SAML configuration falls in first basket where the SOAP messages has to be exchanged from a resource ..usually it would be a 3rd party authentication server which issues the ticked in the form of assertion. Ex Like : Cordys server.

SAML configuration can be achieved by configuring the wsse profile and SSO with the 3rd party server.

Firstly, i have few questions for you :

1.what kind of authentication architecture you are going with ??/

2. Are you using Holder-of key method ??

Regards,

Purnanand Chamarthi