CAS-Server: A stand-alone central login page where the user enters their credentials (i.e. their username and password). CAS supports the standardized SAML 1.1 protocol primarily to support attribute release to clients and single sign-out. (a table in a SQL database, ActiveDirectory/LDAP, Google accounts, etc.) Full compatibility with the open, multi-platform CAS protocol (CAS clients are … Read more
You need to convert your private key to PKCS8 format using following command: openssl pkcs8 -topk8 -inform PEM -outform DER -in private_key_file -nocrypt > pkcs8_key After this your java program can read it.
Both SAML and JWT are security token formats that are not dependent on any programming language. SAML is the older format and is based on XML. It’s used commonly in protocols like SAML-P, WS-Trust and WS-Federation (although not strictly required). JWT (JSON Web Token) tokens are based on JSON and used in new authentication and … Read more
ADFS (Active Directory Federation Services) – Off-the-shelf Security Token Service (STS) produced by Microsoft and built on Windows Identity Foundation (WIF). Relies on AD for authentication. Can be used in active (SOAP web services) or passive (web sites) scenarios and supports SAML tokens, WS-Federation, WS-Trust and SAML-Protocol. It can be used as an Identity Provider … Read more
Refer to Section 8.3 of this SAML core pdf of oasis SAML specification. SP and IdP usually communicate each other about a subject. That subject should be identified through a NAME-IDentifier , which should be in some format so that It is easy for the other party to identify it based on the Format. All … Read more
The original meaning of RelayState is that the SP can send some value to the IDP together with the AuthnRequest and then get it back. The SP can put whatever value it wants in the RelayState and the IDP should just echo it back in the response. This RelayState parameter is meant to be an … Read more
In response to your specific questions: 1.) What is the “ID” value supposed to be? This should be a unique identifier for the SAML request. The SAML 2.0 specification states that it’s really implementation specific how this is done, but makes the following recommendations: The mechanism by which a SAML system entity ensures that the … Read more
SAML responses come with a signature and a public key for that signature. You can use the public key to verify that the content of the SAML response matches the key – in other words – that response definitely came from someone who has the matching private key to the public key in the message, … Read more
Original OpenID 2.0 vs SAML They are two different protocols of authentication and they differ at the technical level. From a distance, differences start when users initiate the authentication. With OpenID, a user login is usually an HTTP address of the resource which is responsible for the authentication. On the other hand, SAML is based … Read more