SAML and Liferay

6,385 views

Published on

My presentation on SAML and Liferay in Liferay Nordic Symposium Warm-up Cruise.

Published in: Technology
1 Comment
3 Likes
Statistics
Notes
  • AssureBridge makes a multi-tenant Liferay adapter that supports both CE and EE as well as multiple IdPs. It supports SAML 1.1, SAML 2.0, OpenID, WS-Federation, LDAP and Active Directory.

    http://www.assurebridge.com/integrations/liferay-saml-single-sign-on-i­ntegration/

    Thanks,

    Oleg
       Reply 
    Are you sure you want to  Yes  No
    Your message goes here
No Downloads
Views
Total views
6,385
On SlideShare
0
From Embeds
0
Number of Embeds
273
Actions
Shares
0
Downloads
97
Comments
1
Likes
3
Embeds 0
No embeds

No notes for slide

SAML and Liferay

  1. 1. SAML and LiferayMika KoivistoSenior Software Engineer
  2. 2. What is SAML?• Security Assertion Markup Language• XML based protocol• OASIS approved standard • SAML 1.0 November 2002 • SAML 1.1 September 2003 • SAML 2.0 March 2005• Flexible and extensible protocol designed to be used by other standards
  3. 3. Why SAML? Source: xkcd.com
  4. 4. Advantages of SAML• Platform neutral• Loose coupling of directories• Improved online experience for end users• Supported by many SaaS applications• Increased security• Strong commercial and open source support
  5. 5. Use Cases• Web Single Sign-On• Attribute based authorization• Identity Federation• WS-Security
  6. 6. SAML Roles• Identity Provider (IdP) / Asserting party• Service Provider (SP) / Relying party
  7. 7. Liferay and SAML• Available as a EE plugin• Supports two operation modes • Identity Provider • Service Provider• Based on SAML 2.0• Provides Web SSO between Liferay and various applications including Salesforce and Google Apps
  8. 8. Features• IdP initiated Web SSO• SP initiated Web SSO• SP initiated Single Logout• IdP initiated Single Logout• Consumes and Produces SAML Metadata• Attribute statement generation (IdP)• JIT provisioning using attribute statements (SP)
  9. 9. DEMO
  10. 10. Roadmap• WS-Security• Management UI• Scalability improvements
  11. 11. Kiitos! Mika Koivisto Senior Software Engineer mika.koivisto@liferay.com

×