Re: UAA and ADFS


Filip Hanik
 

we don't use 'saml' as a profile anymore. that is gone. if it exists in
documentation we must remove it

On Wed, Jul 1, 2015 at 3:10 PM, Filip Hanik <fhanik(a)pivotal.io> wrote:

change

spring_profiles: saml

to

spring_profiles: default

On Wed, Jul 1, 2015 at 3:08 PM, Khan, Maaz <Maaz.Khan(a)emc.com> wrote:

Hi Filip,



Thanks for the links.

Here is what I did.



Checked out UAA code from git.

In resource/uaa.yml file I modified to reflect the use of SAML

spring_profiles: saml



In login.yml I have populated these entries:

saml:

entityID: https://qeadfs1.qengis.xxxxxx.com/adfs/services/trust

nameID: 'urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified'

assertionConsumerIndex: 0

signMetaData: true

signRequest: true

socket:

# URL metadata fetch - pool timeout

connectionManagerTimeout: 10000

# URL metadata fetch - read timeout

soTimeout: 10000

#BEGIN SAML PROVIDERS

providers:

openam-local:

idpMetadata:
https://qeadfs1.qengis.xxxxxx.com/FederationMetadata/2007-06/FederationMetadata.xml

nameID: urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress

assertionConsumerIndex: 0

signMetaData: false

signRequest: false

showSamlLoginLink: true

linkText: 'Log in with OpenAM'



Now when I run UAA locally and hit the URL
http://localhost:8080/uaa/login I get this error

org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'applicationProperties' defined in class path resource
[spring/env.xml]: Cannot resolve reference to bean 'platformProperties'
while setting bean property 'propertiesArray' with key [0]; nested
exception is
org.springframework.beans.factory.NoSuchBeanDefinitionException: No bean
named 'platformProperties' is defined



Given that I have Entity ID –
https://qeadfs1.qengis.xxxxxx.com/adfs/services/trust

And federated metadata from ADFS – :
https://qeadfs1.qengis.xxxxxx.com/FederationMetadata/2007-06/FederationMetadata.xml

What will be the correct steps to integrate with ADFS?



Thanks

Maaz









_______________________________________________
cf-dev mailing list
cf-dev(a)lists.cloudfoundry.org
https://lists.cloudfoundry.org/mailman/listinfo/cf-dev

Join cf-dev@lists.cloudfoundry.org to automatically receive all group messages.