picketlink-idfed.xml without ServiceURL?

[mochtar]

Hello,

We are currently working on a SAML Web SSO implementation based on Layer7 (IdP) and PicketLink (SP). We are trying to implement this without having to change existing web-apps (with form based authentication).

One of the issues we run into, is that the picketlink-idfed.xml file requires the endpoint for the Service Provider (i.e. ServiceURL) to be set. This value is then used in the SAML request sent to the IdP, so it knows where to redirect back to.

Is there a way to not having to configure this? For instance by using the original requested URL as the redirect location in the SAML request?

Thanks,

Adé

[anil.saldhana]

In our case, the IDP just returns the SAML response from where the request came from.  I am not sure what other IDPs would do if there is a PicketLink SP.  If you are using the PL IDP, you can just set it to the sp url.

[kenhuangus]

Just wondering if there is any successful use case integrating Layer 7 XML Firewall with Picketlink. Would appreciate if you can share your experience. We are currently working on a large scale project which will need to get this use case implemented.

Ken Huang