Setting Up the SAML Test Application 

Prerequisites

The user that executes the test application has the role SAMLSSODEMO_SETUP.

Procedure

...

       1.      Access the set up application using your Web browser (http://<host>:<port>/samlssodemo_source/setup).

       2.      Enter the information for the source site. Default information is provided. Adjust the information to use for your test case accordingly, for example, host name and port.

       3.      Enter the information for the destination site.

                            a.      Select the type of authentication to use at the destination site (for example, SAML with mapping module).

                            b.      If you use the mapping module, then enter the user mapping in the table provided.

                            c.      Select Basic Authentication as fallback if desired.

       4.      Choose Configure to perform the set up.

The system’s actions are displayed in your Web browser.

Result

The set up application configures the SAP J2EE Engine for using the test application as follows:

·        It creates the users for the source site, the responder service and the destination site. It also assigns them the necessary roles at each of the sites.

·        It inserts the SAMLLoginModule into the destination site’s login module stack.

·        It sets the various parameters in the configuration, for example, for PartnersInbound and PartnersOutbound.

·        If any of the URLs specified do not use SSL, then it sets the parameter PermitInsecureConnections to true so that these connections will be accepted.

Change this parameter back to false when using SAML in productive environments; otherwise the SAML access is insecure. The system will create warnings in the log for each insecure access.

·        If you use the user mapping module, then it also inserts the mapping module SAMLMappingModule into the login stack for the test application and enters the mapping in the Mapping key.

The syntax for the Mapping key entries is a list of mappings separated by commas that contain the entries using the format:

<SAML_ID> : <J2EE_ID>