Day to Day Java

With this feature WSO2 Identity Server facilitates IdP initiated SAML2 single log out requests. In the SAML service provider configuration UI here is a new configuration called “Enable IdP Initiated SLO”. You can enable this feature using this checkbox. Also you can define redirect URL after the single log out using "Return to URL" under “Enable IdP Initiated SLO” option. Following parameters can be used with IdP initiated SLO request. Parameter Description slo This is a mandatory parameter and must have the value “true” to mark the request as an IdP initiated log out request. spEntityID This is an optional parameter. Value of the parameter should be the SAML issuer name as in “Issuer” field in the SAML service provider configuration UI. returnTo This is an optional parameter. Value of the parameter should be the URL which needs to be redirected to, after the log out. If this parameter is present ...

This feature enables to define multiple assertion consumer service URLs for a SAML2 service provider.  In the  SAML service provider configuration UI there is a new configuration called “Assertion Consumer URLs”. You can add multiple assertion consumer   URLs for the SAML2 service provider using the “Add” button. Since we have multiple assertion consumer URLs, we need to define a default assertion consumer URL in case we can’t retrieve it from the authentication request. Now SP initiated SSO and IdP initiated SSO flows behave as follows, In SP initiated SSO, If no AssertionConsumerServiceUrl is given in the <AuthnRequest>, IS will send the response to default ACS URL of the SP. (Whether request is signed or not)  If the AssertionConsumerServiceUrl in <AuthnRequest> matches with one of the registered URLs, IS will send the response to the matched one.  If the AssertionConsumerServiceUrl in <AuthnRequest> does not match ...

Manage User Account Associations In  WSO2 Identity Server(IS) 5.1.0 we can find a new feature called user account association feature. With this feature IS enables its users to merge their different accounts and switch between them after logged in to a merged account. Users can consume this feature in following ways, As an admin service As a gadget in the IS user dash board Admin Service You can access this admin service using the URL ' https://<HOST_NAME>:9443/services/UserAccountAssociationService?wsdl '.  Following actions can be performed using above admin service. Create a new user account association Delete an exciting user account association Get all associated user accounts of the logged in user Switch between associated user accounts without re-authenticate with the system Dashboard Gadget - Associated User Account In the user dashboard of IS 5.1.0 there is a new gadget called "Associated User Accounts" as follows, ...

Last week I encountered problem that how to get a notification when carbon server throws an error during a long running test or in a production environment. Tailing the log is not practical during these kinds of situations, so I google and found a interesting solution. First you have to install Mailutils package $ sudo apt-get install mailutils Create a file called "notify.sh" and paste the following code in to it. #!/bin/bash EMAILADDRESS="yourmail@gmail.com" EMAILSUBJECT="[Important][CARBON] ERROR OCCURRED" MESSAGEBODY="../repository/logs/errors.txt" cat /dev/null > $MESSAGEBODY SEARCHSTRING='ERROR\|Error\|error\|Exception' SYSLOG=../repository/logs/wso2carbon.log LASTOCCURANCE=`grep -n "$SEARCHSTRING" $SYSLOG | tail -1` LASTLINE=`echo $LASTOCCURANCE | cut -d':' -f1` while true do END=`wc -l $SYSLOG | cut -d' ' -f1` if [ $END -lt $LASTLINE ] then         LASTLINE=$END fi tail -n +$LASTLINE $SYSLOG ...

When you try to configure SAML2 based Web SSO, did you ever hoped is there an easy way to identify what you have missed or did wrong in either in the Identity Provider (IdP) side or Service Provider (SP) side? Then you should try the SAML Toolkit feature which comes with WSO2 Identity Server 5.0.0 . This toolkit consists of two modules, SAML2 Request Validator - user can validate SP initiated SAML2 AuthnRequest SAML2 Response Builder - user can generate SAML2 response for a selected SAML2 Web SSO configuration Lets try this tool, First you need to download the WSO2 Identity Server 5.0.0 and follow the "Getting Started" section to run the product. If you have followed the instructions correctly you should be able to access the server using the URL https://localhost:9443/carbon. Once you have logged to the server, you can find the required tools under Main > Tools > SAML .   Figure 1: SAML Toolkit Section SAML Request Validator Once...

A resent performance study ESB Performance Round 7.5 shows that WSO2 ESB 4.8.1 outperforms all other open-source ESBs and keeps them in the dust as usual.