Wednesday, March 30, 2016

Identity Patterns with the WSO2 Identity Server
Single Sign On between a legacy web app, which cannot change the user interface and service providers, which support standard SSO protocols.

Problem:
  • The business users need to access a service provider,where its UI cannot be changed. The users need to provide their user credentials to the current login form of the service provider. 
  • Once the user logs into the above service provider, and then clicks on a link to another service (which follows a standard SSO protocol), the user should be automatically logged in. The vice-versa is not true.
Solution:
  • Deploy WSO2 Identity Server as the Identity Provider and register all the service providers with standard inbound authenticators (including the legacy app). 
  • For the legacy web app, which does not want to change the UI of the login form, enable basic auth request path authenticator, under the Local and Outbound Authentication configuration. 
  • Once the legacy app accepts the user credentials from its login form, post them along with the SSO request (SAML 2.0/OIDC) to the WSO2 Identity Server. 
  • The WSO2 Identity Server will validate the credentials embedded in the SSO request and if valid, will issue an SSO response and the user will be redirected back to the legacy application. The complete redirection process will be almost transparent to the user. 
  • When the same user tries to log in to another service provider, the user will be automatically authenticated, as the previous step created a web session for the logged in user, under the WSO2 Identity Server domain. 
  • Products: WSO2 Identity Server 5.0.0+ 

2 comments:

Benny said...

Both indices and also the replica rolex uk tend to be amply covered along with Super-LumiNova, improving legibility. The actual chronograph mere seconds hands is actually main and it is tipped within replica watches in order to distinguish in the primary timekeeping fingers. In the 3 placement is really a solitary subdial that replica watches sale both chronograph several hours as well as min's. From 9 o'clock exists the actual constant mere fake rolex sale counter-top, which provides the actual call balance. To start rolex replica sale is situated in the 6 placement from the brand new Omega Speedmaster. Simply launched this season may be the rolex replica. This particular design signifies a significant specialized development with regard to Omega. The actual tag heuer replica uk trend is actually getting upon as well as individuals are starting to understand precisely how awesome this method is really. The actual Liquidmetal method enables the actual rolex replica uk associated with expensive diamonds in to supplies formerly believed unacceptable. Within the beginning, the actual useful programs with regard to Liquidmetal prolonged in order to producing bezels which were composites associated with ceramic along with a unique Zirconium metal that was utilized due to the really sluggish price associated with air conditioning.

dong dong23 said...

ray ban sunglasses
oakley vault
oakley outlet
clarks outlet
coach factory online
cheap nfl jerseys wholesale
mlb jerseys wholesale
louboutin outlet
mont blanc mountain pen
polo outlet
2017.5.6chenlixiang