Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(jans-linux-setup): config-saml-plugin related changes #5321

Closed
pujavs opened this issue Jun 22, 2023 · 2 comments
Closed

feat(jans-linux-setup): config-saml-plugin related changes #5321

pujavs opened this issue Jun 22, 2023 · 2 comments
Assignees
Labels
comp-jans-linux-setup Component affected by issue or PR kind-feature Issue or PR is a new feature request
Milestone

Comments

@pujavs
Copy link
Contributor

pujavs commented Jun 22, 2023

1. Prerequisite: Keycloak installation, Keycloak OpenID Client Creation with admin role.

Update the keycloak server details and client details in saml.properties
Location: https://github.com/JanssenProject/jans/jans-config-api/plugins/saml-plugin/src/main/resources/saml.properties
@uprightech can guide more on this.

2. saml-plugin: config changes: When saml-plugin is to be installed, it config needs to be created

New config definition ou=jans-saml,ou=configuration,o=jans
Added config here -> https://github.com/JanssenProject/jans/tree/jans-config-5148/jans-linux-setup/jans_setup/templates/jans-saml

3. New directory structure to be created on jans server to store metadata file during installation of saml-plugin

  • 3.1 Main directory to store metadata file
    mkdir -p /opt/idp/configs/keycloak/metadata
    chown jetty:jetty-p /opt/idp/configs/keycloak/metadata
    chmod 0760 -p /opt/idp/configs/keycloak/metadata

  • 3.2 Temp directory to store metadata file
    mkdir -p /opt/idp/configs/keycloak/temp_metadata
    chown jetty:jetty /opt/idp/configs/keycloak/temp_metadata
    chmod 0760 /opt/idp/configs/keycloak/temp_metadata

4. config-api-saml-plugin: Jetty changes to configure new config-api plugin for saml-plugin

  • 4.1 Copy new plugin jar: Copy saml-plugin-1.0.15-SNAPSHOT.jar from maven repo -> https://maven.jans.io/maven/io/jans/jans-config-api/plugins/saml-plugin//
    to /opt/jans/jetty/jans-config-api/ custom/libs/
    Example location for 1.0.15-SNAPSHOT->https://maven.jans.io/maven/io/jans/jans-config-api/plugins/saml-plugin/1.0.15-SNAPSHOT/

  • 4.2 Rename jar to saml-plugin.jar in /opt/jans/jetty/jans-config-api/ custom/libs/

  • 4.3 jans-config-api.xml changes: Modify /opt/jans/jetty/jans-config-api/webapps/jans-config-api.xml to append entry for new plugin /opt/jans/jetty/jans-config-api/custom/libs/saml-plugin.jar
    Example entry for reference /opt/jans/jetty/jans-config-api/custom/libs/user-mgt-plugin.jar,/opt/jans/jetty/jans-config-api/custom/libs/scim-plugin.jar,/opt/jans/jetty/jans-config-api/custom/libs/fido2-plugin.jar,/opt/jans/jetty/jans-config-api/custom/libs/saml-plugin.jar

New scopes: Create new scopes and add to the jans-config-api client. Details of the endpoint and scope as usual is in /jans-config-api/server/src/main/resources/config-api-rs-protect.json - This code should already be existing in jans-linux-setup but mentioning for completeness. New endpoint -/jans-config-api/saml/`

Note:
Jans config api changes for saml-plugin endpoints is still in branch jans-config-5148

Related issues:
#5148

@pujavs pujavs self-assigned this Jun 22, 2023
@mo-auto mo-auto added comp-jans-linux-setup Component affected by issue or PR kind-feature Issue or PR is a new feature request labels Jun 22, 2023
@moabu moabu added this to the 1.0.16 milestone Jul 13, 2023
@moabu moabu modified the milestones: 1.0.16, 1.0.17 Aug 2, 2023
@pujavs
Copy link
Contributor Author

pujavs commented Aug 9, 2023

@devrimyatar , it will be good to have Please enter selected IDP : choice based like Chose Backend Type: rather than free text
image

@moabu moabu modified the milestones: 1.0.17, 1.0.18 Sep 18, 2023
@pujavs
Copy link
Contributor Author

pujavs commented Oct 16, 2023

Closing this issues as confirmed by @devrimyatar

@pujavs pujavs closed this as completed Oct 16, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
comp-jans-linux-setup Component affected by issue or PR kind-feature Issue or PR is a new feature request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

5 participants