how to develop a custom J2EE login module for SAML 2.0

[Former Member]

has anyone developed a custom SAML login module? i need to develop one for SAML 2.0, because SAP does not support SAML version 2.0 yet.

I am familiar with how to develop a generic J2EE login module, but I need instructions how to develop a SAML module. I know that there is a sample saml login module from SAP (com.sap.security.core.server.saml.app.ssotest.dest.SAMLMappingModule), does it come with source code?

Tiberiu

[WolfgangJanzen]

Dear Tiberiu,

being SAML 2.0 compliant does not only mean to support the SAML 2.0 Token format ... - it also covers aspects like Identity Federation and Session Management (Single LogOff, SLO).

So, it's definely not enough just to deploy a new JAAS login module ...

If it would be just that easy, SAP NetWeaver would already support SAML 2.0

Cheers, Wolfgang

[Former Member]

Does anyoine know if the latest NW release supports SAML 2.0?

[WolfgangJanzen]

>

> Does anyoine know if the latest NW release supports SAML 2.0?

Since November 2007 a lot of time has passed by - and there's news:

SAML 2.0 is supported by NWAS Java 7.20 and NWAS ABAP 7.02.

SAP NetWeaver Identity Management 7.2 has passed the SAML 2.0 Interoperability Test (of the Liberty Alliance) last recently - see:

http://media.projectliberty.org/saml_2_0_test_procedure_v3_2_2_full_matrix_implementation_table_q309...

http://kantarainitiative.org/wordpress/tag/saml-2-0/

[Former Member]

Thanks.

Will that also be enabled in the portal?

[WolfgangJanzen]

>

> Thanks.
> Will that also be enabled in the portal?

Anything which uses NWAS Java 7.20 as platform - EP, IdM, CE, ...