Hard Coded URLs

[dphanva]

I've been looking into using PicketLink as a solution for single-sign-on for my web applications.  What I'm surprised is that I would have to specify the IDP URL in picketlink.xml, which gets compiled into my .war files.

Is there a way to do this at deployment time, rather than build time?

Thanks.

[jcacek]

David, look at PicketLink Quickstarts. You can use a system property to set the URL, then the picketlink.xml looks like:

• IDP - https://github.com/picketlink2/picketlink-quickstarts/blob/master/saml/idp/src/main/webapp/WEB-INF/picketlink.xml
• SP - https://github.com/picketlink2/picketlink-quickstarts/blob/master/saml/employee/src/main/webapp/WEB-INF/picketlink.xml

For instance:

<PicketLinkSP xmlns="urn:picketlink:identity-federation:config:2.1" ServerEnvironment="tomcat" BindingType="REDIRECT" RelayState="someURL">
          <IdentityURL>${idp.url::http://localhost:8080/idp/}</IdentityURL>
          <ServiceURL>${employee.url::http://localhost:8080/employee/}</ServiceURL>
</PicketLinkSP>

When you start the server, you can set system properties using -Dname=value arguments:

java ... '-Didp.url=http://my-server.my-company.example/my-idp/' ...