STS and SAML 2 Security tokens

[former_member672502]

For service based SSO, does IDM 7.2 issue WS-Security SAML2 assertion tokens? Specifically, I am looking for information on Holder-of-Key Subject confirmation method and related configuration on IDM.

Thanks

[former_member182254 · Accepted solution]

Hi,

Yes, it can issue SAML2 HoK assertions. Check [IDM 7.2|http://www.sdn.sap.com/irj/sdn/nw-identitymanagement?rid=/webcontent/uuid/50877d57-a9ae-2d10-e7ae-915169263d49] [original link is broken]; -> [Documentation|http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/4000d09f-a9b9-2d10-8b90-ba3a0f9fe0c8] [original link is broken]; -> Identity Federation: [SAP NetWeaver Identity Management Security Token Service|http://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/2030628a-a1da-2d10-4482-b21c8d216f2f]

Regards,

Dimitar

[former_member672502 · Accepted solution]

Hi Dimitar,

Thank you for the answer. A related question: Does NW WebAS Java support WS-Security SAML2 HoK token authentication. I only found documentation & examples for SAML 1.1 support. Can you also point to documentation/examples on that?

Thanks,

Vinay

[former_member182254 · Accepted solution]

Hi Vinay,

Sorry for the delayed answer. Although it might look strange but for the moment NW AS Java does not support SAML 2.0 HoK assertions. Only AS ABAP does support such tokens. Still you might be able to use X.509 client certificates issued by the STS for authentication to web services running on NW AS Java.

Regards,

Dimitar