8 Replies Latest reply on Feb 9, 2015 11:05 AM by Dozie Agbai

    Picketlink not redirecting after succesfull authentication from IDP to SP

    Pascal Janssen Newbie

      Hi,

       

      We are upgrading to wildfly 8.2.0 in our project from JBoss AS 7 (picketlink 2.1.4), and are using picketlink for authentication. I tried to get going with the picketlink-federation-saml-idp-basic and picketlink-federation-saml-sp-post-basic quickstarts, as we are already using SAML on our project running on JBoss. The following situation describes what happens when I try to login using JBoss AS 7 and picketlink 2.1.4 (SAML setup):

       

      - Request the SP url

      -> SP redirects to IDP with a SAML request

      -> IDP displays a login form

      -> User logs in

      -> IDP redirects back to the SP with a SAML assertion (using the IdentityURL from the SAML request sent by the SP)

      -> User is logged in to the SP

       

      Here's what happens when using WildFly 8.2.0, when using either picketlink 2.6.0.Final/2.6.1.Final/2.7.0CR2:

       

      - Request the SP url

      -> SP redirects to IDP with a SAML request

      -> IDP displays a login form

      -> User logs in

      -> IDP does not redirect back to the SP, a SAML assertion is not generated

       

      When using the picketlink-federation-saml-idp-basic and picketlink-federation-saml-sp-post-basic quickstarts for WildFly, the behavior is the same as the latter example. However, a page is displayed from the IDP application where I can use a hyperlink to navigate back to the SP. This is not the behaviour I was expecting when using SAML. Could you please help? Does anyone have a working quickstart example with the redirect from IDP to SP in place after succesfull authentication?