本文介绍了什么是Shibboleth身份验证的Java应用程序？的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！
问题描述
我想对我的Web应用程序使用shibboleth身份验证。是否有任何示例java应用程序告诉如何逐步使用shibboleth身份验证。
I want to use shibboleth authentication for my web application. Is there any sample java application which tell how to use shibboleth authentication step by step.
我已经安装了shibboleth但仍然不知道如何使用它。
I have installed shibboleth but still didn't get idea how to use it.
推荐答案
我假设您必须使用服务提供商
I assume you have to use Service Provider
使用以简单的方式测试您的应用。
Use testshib to test your app in an easy way.
按照步骤
- 在您的机器上下载并安装sp
- 将shibboleth的配置包含在您的apache
2.1中。进入httpd.conf文件添加包含PATH / opt / path / etc / apache22（如果版本是apache2.2，否则合适） - 在apache22.config文件中添加你想要的位置安全 - 在shibboleth2.xml文件中（在etc文件夹中）/ b>
- 将你的实体id（应用程序默认元素）放入/ a href =https：/ /mywebsite.com/shibbolethrel =nofollow> https://mywebsite.com/shibboleth - 这可以是任何东西，而不是必要的真实路径
- put entity在sso元素中你的id的id，在testshib的情况下，它将是
- 将idp的元数据uri放入idp的元数据urn，如果它是
- 下载您的来自 - 这里mywebsitehost将是一个真正的主机，其余路径将由shibboleth自动配置 - 此路径将下载您的sp的元数据文件
- 通过注册表将您的元数据文件上传到testshib
- download and instal sp on your machine
- include shibboleth's configuration into your apache2.1. into httpd.conf file add include "PATH/opt/path/etc/apache22"(if version is apache2.2, otherwise appropriate)
- in apache22.config file add the location you want to secure - it would be /secure bydefault
- in your shibboleth2.xml file (in etc folder) put your entity id(application defaults element), ex https://mywebsite.com/shibboleth - this can be anything, not neccessary a real path
- put entity id of your idp in sso element, in case of testshib it would be https://idp.testshib.org/idp/shibboleth
- in the metadata provider put idp's metadata uri to your idp's metadata urn, incase testshib it would be http://www.testshib.org/metadata/testshib-providers.xml
- Download your metadata from https://mywebsitehost.com/Shibboleth.sso/Metadata - here mywebsitehost would be a real host and rest path will be automatically configured by shibboleth - this path will download your sp's metadata file
- Upload your metadata file to testshib via register
你准备好了。转到，您应该被重定向到idp进行身份验证。
You are ready to go. Go to https://mywebsitehost.com/secure and you should be redirected to idp to authenticate.
注意：确保您的域名配置为ssl（https）
NOTE: Make sure you have a domain name configured with ssl(https)
这篇关于什么是Shibboleth身份验证的Java应用程序？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持！