Saml2-Authentication-Handler cannot handle encrypted Response because name space "xenc" is not bound With Picketlink 2.7.0.Final on Wildfly 8.0.2.Final or 9.0.0.Final my service provider cannot handle encrypted responses. Root cause is a SAXParseException because of missing name space "xenc" for an element "x... 
@Observes SecurityConfigurationEvent: deployment get stuck at "Bootstrapping PicketLink" Having some problems with application deployment after I added PicketLink to my project. When I add an observer to SecurityConfigurationEvent, the deployment simply stops at "PLINK002000: Bootstrapping PicketLink" pha... 
SAML metadata generation in PicketLink SP Hi I'm trying to configure a PicketLink SP and a OpenAM IdP. It seems OpenAM requires a SAML metadata file. But I'm unable to figure out how to generate a metadata file from a PicketLink SP configurati... 
Replacement for Seam Security's RunAsOperation (impersonate) I'm trying to migrate a Seam 2.3 application to CDI+PicketLink, but I can't find a replacement for Seam's RunAsOperation in PicketLink. (Shiro has a similar function in Subject.runAs, but only for authenticated ... 
Strange behavior on query for roles I'm initializing my security model with this class: web-budget/SecurityInitializer.java at experimental · arthurgregorio/web-budget · GitHub But when i query for roles on line #78 if is the first cyc... 
Keystore and key passwords in service provider's picketlink.xml Hello all, how do you protect the passwords for key store and signing and encryption keys in service provider's picketlink.xml (see https://docs.jboss.org/author/display/PLINK/Service+Provider+Configuration#Se... PicketLink Federation + IDM API I'm using PicketLink for SSO (Federation). I implemented the IP module according to the quickstart using authentication via JAAS + HTML Form. However, I need to customize login flow and I would like to use JSF with Pi... 
Why doesn't SAML20TokenProvider persist tokens to the token registry like SAML20AssertionTokenProvider? SAML20TokenProvider does not call a token registry to persist or fetch tokens whereas SAML20AssertionTokenProvider does. Is there a specific reason for this? Background: We configured the picketlink sec... 
External SSO authentication on Tomcat Hello all, I am using PicketLink to implement a Service Provider that uses an external Saml Based SSO to authenticate users. I want to protect my web pages like this: The user connects to https://myapp.com T... 
Mixing Two-Factor with Federation We currently have a SAML 2.0 infrastructure using PicketLink Federation 2.1.7, running on JBoss AS7.2. We have several SP applications tied in, including PicketLink enabled Java web applications, .NET applicatio... 
Securing EJB call is causing an seperate entitymanager to fail Hello Has anyone run into this issue when securing EJB calls using picketlink annotations. Any help would be much appreciated.. When applying a security annotation to an EJB method it correctly s... 
jbpm rest api is allowed to access by any user with password "EMPTY_STR" if using SAML2LoginModule jbpm rest api is protected by fileter: BasicAuthSecurityFilter. that will call authenticationService.login() which finally call SAML2LoginModule.login() which method is extended from UsernamePasswordLoginModule. ... 
Problem in EJB module with picketLink Hello, i have just training with pocketlink. I have tried to make simple getting started app. All worked ok. Then i tried to make simble stateless local EJB bean. I created standart netbeans Enterprise maven arche... 
Picket Link Remote Interfaces Does PicketLink support remote interfaces for interacting with the IDM/IdP? Something like REST/SOAP/HTTP/WS-* ? 
PicketLink as a Federation Provider (FP) If I wanted to use PicketLink as a Federation Provider, federating Security Tokens from other STSs (non PicketLink) and enhancing them with claims based on the configuration in a local IdP is that possible? PicketLink User Interface My customer has inherited an application that is integrated with PicketLink but now they want to separate the IdP from the SP. Is there a packaged user interface that would allow them to administer the IdP (create use... Picketlink SessionManager - is it new feature? Hello, We are using Picketlink for a long time, and all went well. But now when we tried to upgrade Picketlink to new version 2.7.0 we faced with unusual behavior. We expected, that the user can be abl... 
Problems Creating Custom Group with Child Reference Hey guys, Today, I'm writing a tool in my application to allow users to create their own groups. The tool must be a page with a tree structure which allows the users to create a group, and then add child group... 
HTTP Patch method Hello Has anyone run into the problem getting @PATCH working with Picketlink? From what I can see in org.picketlink.http.HttpMethod HTTP PATCH does not appear to be a supported method type. Are... Picketlink Oauth provider - Sample Server and Client implementation Hi All, I am looking for Picketlink's Oauth provider - Server & Client sample implementation with some documents. I could not find a proper working application anywhere. Could anyone point me to ri... 
Log in to follow, share, and participate in this community.