UAA integrate with ADFS


Tina Zhang
 

Hi,

We have cloud foundry v197 env wants to integrate UAA server with existing ADFS. But uaa server not working properly when changing uaa.yml from spring_profiles: postgresql to spring_profiles: default. We want to know the steps to integrate UAA with MS ADFS.

We have modified uaa server as following:


1. uaa.yml, change spring_profiles: postgresql to spring_profiles: default

name: uaa

database:
url: jdbc:postgresql://10.8.52.65:5524/uaadb
username: uaaadmin
password: "c1oudc0w"


spring_profiles: default
#spring_profiles: postgresql

logging:
config: /var/vcap/jobs/uaa/config/log4j.properties

...

2. in login.yml, adding
saml:
entityID: https://XXXX/adfs/services/trust
nameID: 'urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified'
assertionConsumerIndex: 0
signMetaData: true
signRequest: true
socket:
connectionManagerTimeout: 10000
soTimeout: 10000
providers:
openam-local:
idpMetadata: https:// XXXX/FederationMetadata/2007
-06/FederationMetadata.xml
nameID: urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
assertionConsumerIndex: 0
signMetaData: false
signRequest: false
showSamlLoginLink: true


Error from uaa.log as following, change spring_profiles: postgresql to default causes openid cannot be identified.

[2015-07-21 22:42:46.001] uaa - 9927 [localhost-startStop-1] .... ERROR --- YamlConfigurationValidator: Failed to load YAML validation bean. Your YAML file may be invalid.
Can't construct a java object for tag:yaml.org,2002:org.cloudfoundry.identity.uaa.UaaConfiguration; exception=Cannot create property=oauth for JavaBean=org.cloudfoundry.identity.uaa.UaaConfiguration(a)38ad5581; Cannot create property=openid for JavaBean=org.cloudfoundry.identity.uaa.UaaConfiguration$OAuth(a)40615f24; Unable to find property 'openid' on class: org.cloudfoundry.identity.uaa.UaaConfiguration$OAuth
in 'string', line 1, column 1:
oauth:
^


What are steps to integrate cloud foundry UAA server to MS ADFS?

Thanks,
Tina Zhang


Gwenn Etourneau
 

I am guessing a problem in your yaml file and the spring profile shoud
be 'saml,default,fileMetadata'
for saml no ?
But I am not sure about the exact format

On Wed, Jul 22, 2015 at 8:28 AM, Zhang, Yuan <Yuan.Zhang(a)emc.com> wrote:

Hi,



We have cloud foundry v197 env wants to integrate UAA server with existing
ADFS. But uaa server not working properly when changing uaa.yml from
spring_profiles: postgresql to spring_profiles: default. We want to know
the steps to integrate UAA with MS ADFS.



We have modified uaa server as following:



*1. **uaa.yml, change spring_profiles: postgresql to
spring_profiles: default*



name: uaa



database:

url: jdbc:postgresql://10.8.52.65:5524/uaadb

username: uaaadmin

password: "c1oudc0w"





*spring_profiles: default*

#spring_profiles: postgresql



logging:

config: /var/vcap/jobs/uaa/config/log4j.properties





*2. **in login.yml, adding *

saml:

entityID: https://XXXX/adfs/services/trust

nameID: 'urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified'

assertionConsumerIndex: 0

signMetaData: true

signRequest: true

socket:

connectionManagerTimeout: 10000

soTimeout: 10000

providers:

openam-local:

idpMetadata: https:// XXXX/FederationMetadata/2007

-06/FederationMetadata.xml

nameID: urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress

assertionConsumerIndex: 0

signMetaData: false

signRequest: false

showSamlLoginLink: true





Error from uaa.log as following, change spring_profiles: postgresql to
default causes openid cannot be identified.



[2015-07-21 22:42:46.001] uaa - 9927 [localhost-startStop-1] .... ERROR
--- YamlConfigurationValidator: Failed to load YAML validation bean. Your
YAML file may be invalid.

Can't construct a java object for tag:yaml.org,2002:org.cloudfoundry.identity.uaa.UaaConfiguration;
exception=Cannot create property=oauth for
JavaBean=org.cloudfoundry.identity.uaa.UaaConfiguration(a)38ad5581; *Cannot
create property=openid for
JavaBean=org.cloudfoundry.identity.uaa.UaaConfiguration$OAuth(a)40615f24;
Unable to find property 'openid' on class:*
org.cloudfoundry.identity.uaa.UaaConfiguration$OAuth

in 'string', line 1, column 1:

oauth:

^





*What are steps to integrate cloud foundry UAA server to MS ADFS?*



Thanks,

Tina Zhang

_______________________________________________
cf-dev mailing list
cf-dev(a)lists.cloudfoundry.org
https://lists.cloudfoundry.org/mailman/listinfo/cf-dev