• Picketlink SP errors out during signature validation on a Signed + Encrypted SAML token

    Hi,   I am trying to consume a Signed + Encrypted SAML token from ADFS on JBoss-EAP 6.3 using Picketlink version 2.7. The token is decrypted correctly but during the next step of signature validation following e...
    Profile Photo
    last modified by sheetul
  • Issue while enabling SSL for PicketLink IDP

    Hello,   We are using Apache HTTP server for reverse proxy. The Apache HTTP server is self-signed and has SSL enabled. Any request to PicketLink IDP is fronted by Apache HTTP and then re-directs to the IDP. The ...
    Profile Photo
    last modified by kshiva
  • Accessing application with 'localhost' has problem when 'public' interface is configured for <any-address/> in Wildfly

    This is bugging me for last few days, I felt sharing here would help really. Let me directly jump into details, appreciate any response.   Environemt Details: Wildfly-8.2.0.Final + Picketlink 2.7.0.CR2   ...
    Profile Photo
    created by pradyumna13
  • PL Use Case: WildFly SSO with Picketlink IDM

    I am adding PicketLink IDM to an existing deploy that relies on the SSO feature added to WildFly from the WFLY-2404 feature request. This form of SSO is simplistic because its to allow multiple deployments to share a ...
    Profile Photo
    created by starr_stealer
  • picketlink idm with idp

    Hi,   i understood how to create and use an idp with the loginModules provided by Jboss eap6   I understood the examples of IDM authentification.   But i can't make the link between an IDM  and ...
    Profile Photo
    last modified by olisab
  • Where are the sources for picketlink-* 2.5.3 SP10 redhat 1 ?

    Hello,   could someone tell me where to find the sources for the picketlink modules bundled with EAP 6.3?   Thanks in advance.   Frank
    Profile Photo
    created by rossolfr
  • PicketLink and Keycloak projects are merging!

    More details here:   Together with new PicketLink 2.7.0.Final release, we would like to announce that PicketLink andKeycloak projects will be merging their efforts. Code base of both will get unified and new fea...
    Profile Photo
    created by bdaw
  • Adding picketlink-social to a picketlink-idm-custom-identity model

    So I am trying add fb authentication to my app, it has an idm custom identity model and it has delta spike, I just followed the quickstarts.  I managed to get the picketlink authentication with facebook quickstar...
    Profile Photo
    last modified by jdc
  • handling extra attributes from IDP on the SP

    Hello, is there a way I can handle extra LDAP attributes sent by the IDP client using picketlink's SP. I have searched the web and I cannot find anything pertaining to that
    Profile Photo
    last modified by dagbai
  • Need help on which PicketLink project to choose

    I have started exploring PicketLink to use in my java based project. My project requirements are like this.   1. Have one java application with spring security running in firstJBOSS EAP6.3 instance 2. Have othe...
    Profile Photo
    created by penusila611621
  • Exception when running quickstart picketlink-authorization-idm-ldap

    Hi everybody,   I am learning Picketlink and I started from the quickstarts. I sambled upon a problem with the picketlink-authorization-idm-ldap Project. When adding the Role to a User (I am using the default m...
    Profile Photo
    last modified by adaglio
  • Principal name is null on SessionTimeout

    Hello Team,   On Session timeout, I redirect the User to logout of the application. I am getting principal name as null on session time out, due to that, there is an error thrown in SAML2LogoutHandler.java clas...
    Profile Photo
    created by kshiva
  • HttpServletResponse is always commited after SAML2 SSO

    Hi,   after the successful SSO on IDP side I am redirected to login servlet mapped to /login. Problem is that HttpServletResponse in login servlet is always commited. Why? Is it normal?   Environment: pic...
    Profile Photo
    created by quvad
  • DefaultIdentity on domain mode clustered environment org.infinispan.commons.marshall.NotSerializableException

    Hi,   we use wildfly 8.2. with session failover and picketlink 2.7.0.CR2. We @Inject an instance of Identity into our @Sessionscoped bean. Infinispan then tries to serialize the session data but fails with t...
    Profile Photo
    last modified by zerounix
  • Class LDAPIdentityStore has a strange behavior for method addRelationship

    When adding a Relationship (Grant or GroupMembership) I am expecting to see a new entry in my Role or Group  attribute "member". Unfortunately this only occurs if the attribute "member" is not empty.   this...
    Profile Photo
    created by adaglio
  • Problems in installation of picketlink into jboss-5.1.0 ...

    Hi all, i've installed a federation system (SAML2) based on picketlink into Jboss 7.1.1. I've created an idp and a sp application on it and they work very well. My problem, homewever, is to install that picketlink s...
    Profile Photo
    created by giluka_m
  • How is the SAML AuthnRequest issuer set when using the metadata configuration provider?

    I've been experimenting with the picketlink-federation-saml-sp-with-metadata quickstart and have noticed something unexpected about the SAML request sent by PicketLink (acting as a SP). Even though the entity ID is pa...
    Profile Photo
    last modified by atomicknight
  • Generate Metadata

    I have a use case which uses picketlink as an IDP and an application running on WebLogic as the SP. The built in federation tools of WebLogic can only be used if you provide a metadata xml file to it. Is there a good ...
    Profile Photo
    last modified by jdonofrio
  • Cannot not use dynamic resolution of idp with different domain

    Hi all, I am pretty new to picketlink and working with picketlink 2.7.0 CR3 on a JBOSS wildfly (8.2.0) server. I am working with a picketlink server and I took the example from the dynamic resolution of idp which is ...
    Profile Photo
    last modified by dagbai
  • Picketlink and Active Directory (ldap store)

    I'm using picketlink for safety in my application and now need to plug it in AD (SAMBA 4, not M$ AD). My setup is as follows:   public class SecurityConfiguration {        @Inject  ...
    Profile Photo
    last modified by arthurgregorio