feat(jans-linux-setup): config-saml-plugin related changes #5321
Labels
comp-jans-linux-setup
Component affected by issue or PR
kind-feature
Issue or PR is a new feature request
Milestone
1. Prerequisite: Keycloak installation, Keycloak OpenID Client Creation with admin role.
Update the keycloak server details and client details in saml.properties
Location: https://github.com/JanssenProject/jans/jans-config-api/plugins/saml-plugin/src/main/resources/saml.properties
@uprightech can guide more on this.
2. saml-plugin: config changes: When saml-plugin is to be installed, it config needs to be created
New config definition
ou=jans-saml,ou=configuration,o=jans
Added config here -> https://github.com/JanssenProject/jans/tree/jans-config-5148/jans-linux-setup/jans_setup/templates/jans-saml
3. New directory structure to be created on jans server to store metadata file during installation of saml-plugin
3.1 Main directory to store metadata file
mkdir -p /opt/idp/configs/keycloak/metadata
chown jetty:jetty-p /opt/idp/configs/keycloak/metadata
chmod 0760 -p /opt/idp/configs/keycloak/metadata
3.2 Temp directory to store metadata file
mkdir -p /opt/idp/configs/keycloak/temp_metadata
chown jetty:jetty /opt/idp/configs/keycloak/temp_metadata
chmod 0760 /opt/idp/configs/keycloak/temp_metadata
4. config-api-saml-plugin: Jetty changes to configure new config-api plugin for saml-plugin
4.1 Copy new plugin jar: Copy saml-plugin-1.0.15-SNAPSHOT.jar from maven repo -> https://maven.jans.io/maven/io/jans/jans-config-api/plugins/saml-plugin//
to /opt/jans/jetty/jans-config-api/ custom/libs/
Example location for 1.0.15-SNAPSHOT->https://maven.jans.io/maven/io/jans/jans-config-api/plugins/saml-plugin/1.0.15-SNAPSHOT/
4.2 Rename jar to saml-plugin.jar in /opt/jans/jetty/jans-config-api/ custom/libs/
4.3 jans-config-api.xml changes: Modify /opt/jans/jetty/jans-config-api/webapps/jans-config-api.xml to append entry for new plugin /opt/jans/jetty/jans-config-api/custom/libs/saml-plugin.jar
Example entry for reference /opt/jans/jetty/jans-config-api/custom/libs/user-mgt-plugin.jar,/opt/jans/jetty/jans-config-api/custom/libs/scim-plugin.jar,/opt/jans/jetty/jans-config-api/custom/libs/fido2-plugin.jar,/opt/jans/jetty/jans-config-api/custom/libs/saml-plugin.jar
New scopes: Create new scopes and add to the jans-config-api client. Details of the endpoint and scope as usual is in /jans-config-api/server/src/main/resources/config-api-rs-protect.json - This code should already be existing in jans-linux-setup but mentioning for completeness. New endpoint -/jans-config-api/saml/`
Note:
Jans config api changes for saml-plugin endpoints is still in branch jans-config-5148
Related issues:
#5148
The text was updated successfully, but these errors were encountered: