pl federation, idp utilizing idm model

[jukka.sirvio]

Hello!

I have multiple JSF applications which could not be packaged inside single ear.

In my Wildfly "setup", I want to use picketlink federation, with one JPA based idp and at least two sp's.

I want to utilize picketlink default idm schema from idp, is this somehow possible?

Main reason for above question is that idm schema have salted pwd's, but JAAS based default implementations have only hashed pwd's and also different model.

This way I would be able to utilize SAME db-schema for:

  - authenticate users through idp

  - deploy local, application level, fine grained authorization.

Are there any examples on this?

Yours:

Jukka

[jukka.sirvio]

Keycloak ootb would be THE solution, instead of Picketlink!

[jukka.sirvio]

With keycloak, life is easier. SAML SSO with above configuration was pretty fast to do.