PicketLink as SP using a servlet filter

[rnilsen]

Hi,

I have been looking for a servlet filter solution to implement with a web application as an SP on a generic servlet container. I was using oiosaml.java an it is working out pretty well. But then I noticed your project here and I am wondering about switching to PicketLink to extend the options of IdP beyond just SAML2 (which is what oiosaml supports through it's filter). My current setup is with OpenSSO as IdP. However, I can't find any good documentation on how to use PicketLink as an SP using a generic container (no Seam) and that shows me how to use SAML2 metadata to configure it. Is there such a guide out there?

[anil.saldhana]

http://jboss.org/picketlink/Fed.html

[rnilsen]

Thanks for the reply, Anil.

I have read all the articles, but I can't find any documentation on how to link the metadata-file from the IdP to the SP. Is it supposed to be configured in the picketlink-idfed.xml file on the SP? I found an article on how to do it in Seam, http://community.jboss.org/docs/DOC-14752, but I can't really figure out how and if it can be done outside Seam for a generic servlet container.

Also, how do I get the metadata from the SP? What I see is that there is a servlet, org.picketlink.identity.federation.web.servlets.saml.MetadataServlet, but I am not sure if that can give me metadata from the SP.

[anil.saldhana]

We still have not tied the loose ends with the SAML Metadata yet.  At this time, you will need the configuration settings for IDP in SP. Hopefully when we release v1.0.3 next month, we will have taken care of the metadata tying.