http://wiki.karljones.com/index.php?action=history&feed=atom&title=SAML_configuration 2026-10-23T16:56:46Z Revision history for this page on the wiki MediaWiki 1.24.2 http://wiki.karljones.com/index.php?title=SAML_configuration&diff=13484&oldid=prev 2016-04-25T12:36:54Z

<p></p> <table class='diff diff-contentalign-left'> <col class='diff-marker' /> <col class='diff-content' /> <col class='diff-marker' /> <col class='diff-content' /> <tr style='vertical-align: top;'> <td colspan='2' style="background-color: white; color:black; text-align: center;">← Older revision</td> <td colspan='2' style="background-color: white; color:black; text-align: center;">Revision as of 12:36, 25 April 2016</td> </tr><tr><td colspan="2" class="diff-lineno">Line 50:</td> <td colspan="2" class="diff-lineno">Line 50:</td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'>&#160;</td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* [http://nzpcmad.blogspot.com/2013/04/adfs-saml-configuration-parameters.html ADFS : SAML configuration parameters]</div></td><td class='diff-marker'>&#160;</td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>* [http://nzpcmad.blogspot.com/2013/04/adfs-saml-configuration-parameters.html ADFS : SAML configuration parameters]</div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">[[Category:Computing]]</ins></div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">[[Category:Web design and development]]</ins></div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">[[Category:Web security]]</ins></div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">[[Category:XML]]</ins></div></td></tr> </table>

Karl Jones http://wiki.karljones.com/index.php?title=SAML_configuration&diff=6077&oldid=prev 2015-10-14T18:01:07Z

<p>Created page with &quot;SAML configuration is the <a href="/index.php?title=Configuration&amp;action=edit&amp;redlink=1" class="new" title="Configuration (page does not exist)">configuration</a> of <a href="/index.php/Security_Assertion_Markup_Language" title="Security Assertion Markup Language">Security Assertion Markup Language</a> (SAML). == Questions to ask == When you are asked to configure SAML access to applicati...&quot;</p> <p><b>New page</b></p><div>SAML configuration is the [[configuration]] of [[Security Assertion Markup Language]] (SAML).<br /> <br /> == Questions to ask ==<br /> <br /> When you are asked to configure SAML access to application xxx owned by company yyy via ADFS v2.0, you need the following information.<br /> <br /> If their SAML stack is a well-known product -- Ping, OpenAM, Oracle, simpleSAMLPHP -- your life is suddenly orders of magnitude easier.<br /> <br /> You can follow the normal metadata (idp.xml, sp.xml) exchange.<br /> <br /> If the words &quot;home brewed&quot; / &quot;custom&quot; / &quot;proprietary&quot; etc. are used, prepare for a load of pain.<br /> <br /> The questions:<br /> <br /> * SAML 1.1 or SAML 2.0?<br /> * IdP or SP initiated?<br /> * HTTP POST, Redirect or Artefact?<br /> * What SAML stack implementation do you use?<br /> * Is there an installation document?<br /> <br /> If no document, what is ...<br /> <br /> * SP entity ID?<br /> * https SAML endpoint?<br /> * SAML subject NameID format e.g. UPN, email?<br /> * What attribute do you expect to use for NameID e.g. UPN, email?<br /> * What AD attribute is used to populate this?<br /> <br /> Do you have the normal SAML metadata exchange protocol file?<br /> <br /> Is the SP token required to be encrypted? Certificate?<br /> <br /> Are AuthnRequests and Assertions expected to be signed? Certificate?<br /> <br /> Single Logout (SLO) required?<br /> <br /> SHA 1 or SHA 256?<br /> <br /> The above can be configured via the normal ADFS screens.<br /> <br /> There are others that require the [https://technet.microsoft.com/en-us/library/ee892329.aspx AD FS 2.0 Cmdlets in Windows PowerShell]. These are normally figured out by trial and error. In my experience, asking these types of questions just results in blank looks. You have to &quot;suck it and see&quot; as they say in Kiwiland!<br /> <br /> E.g. if ADFS is the RP, then SamlResponseSignature may need to be changed.<br /> <br /> This specifies the response signatures that the relying party expects. Valid values are AssertionOnly, MessageAndAssertion, and MessageOnly.<br /> <br /> The default is AssertionOnly.<br /> <br /> Source:<br /> <br /> * [http://nzpcmad.blogspot.com/2013/04/adfs-saml-configuration-parameters.html ADFS : SAML configuration parameters]</div>

Karl Jones