Preface
Sun OpenSSO Enterprise 8.0 provides a comprehensive solution for protecting
network resources that integrates authentication and authorization
services, policy agents, and identity federation. This Preface to
the Deployment Example: SAML v2 Using Sun OpenSSO Enterprise 8.0 contains
the following sections:
About This Guide
Deployment Example: SAML v2 Using Sun OpenSSO Enterprise 8.0 provides
detailed instructions for enabling the Security Assertion Markup Language
version 2 (SAML v2) in a federated environment. The procedures in
this guide were used to build, deploy and test this deployment in
a lab facility but you can adapt these instructions to suit your company's
needs. Best results will be obtained by executing the tasks in the
exact sequence in which they are presented. Use the Table of Contents
as a master task list. Tasks are numbered for your convenience.

Caution –
If deviating from the task sequence or details described
in this guide, you should refer to the relevant product documentation
for information or necessary requirements.
Before You Read This Book
This book is intended for use by IT administrators and software
developers who implement a web access platform using Sun servers and
software. Readers of this guide should be familiar with the following
technologies:
-
Security Assertion Markup Language (SAML) version
2
-
eXtensible Markup Language (XML)
-
Lightweight Directory Access Protocol (LDAP)
-
JavaTM
-
JavaServer PagesTM (JSP)
-
HyperText Transfer Protocol (HTTP)
-
HyperText Markup Language (HTML)
Related Documentation
Related documentation is available as follows:
OpenSSO Enterprise 8.0 Core Documentation
The OpenSSO Enterprise 8.0 core documentation set contains the following
titles:
-
The Sun OpenSSO Enterprise 8.0 Release Notes will be available
online after the product is released. It gathers an assortment of
last-minute information, including a description of what is new in
this current release, known problems and limitations, installation
notes, and how to report issues with the software or the documentation.
-
The Sun OpenSSO Enterprise 8.0 Technical Overview provides
high level explanations of how OpenSSO Enterprise components work together to protect
enterprise assets and web-based applications. It also explains basic
concepts and terminology.
-
The Sun OpenSSO Enterprise 8.0 Deployment Planning Guide provides
planning and deployment solutions for OpenSSO Enterprise based on the solution
life cycle
-
The Deployment Example: Single Sign-On, Load Balancing and Failover Using Sun OpenSSO Enterprise 8.0 provides instructions for building
an OpenSSO solution incorporating authentication, authorization and
access control. Procedures for load balancing and session failover
are also included.
-
The Deployment Example: SAML v2 Using Sun OpenSSO Enterprise 8.0 (this
guide) provides instructions for building an OpenSSO solution incorporating SAML v2 federation.
Installation and configuration procedures are included.
-
The Sun OpenSSO Enterprise 8.0 Installation and Configuration Guide provides
information for installing and configuring OpenSSO Enterprise.
-
The Sun OpenSSO Enterprise 8.0 Performance Tuning Guide provides
information on how to tune OpenSSO Enterprise and its related components for optimal
performance.
-
The Sun OpenSSO Enterprise 8.0 Administration Guide describes
administrative tasks such as how to create a realm and how to configure a policy. Most of the tasks described
can be performed using the administration console as well as the ssoadm command line utilities.
-
The Sun OpenSSO Enterprise 8.0 Administration Reference is
a guide containing information about the command line interfaces,
configuration attributes, internal files, and error codes. This information
is specifically formatted for easy searching.
-
The Sun OpenSSO Enterprise 8.0 Developer’s Guide offers
information on how to customize OpenSSO Enterprise and integrate its functionality
into an organization’s current technical infrastructure. It
also contains details about the programmatic aspects of the product
and its API.
-
The Sun OpenSSO Enterprise 8.0 C API Reference for Application and Web Policy Agent Developers provides summaries of
data types, structures, and functions that make up the public OpenSSO Enterprise C
SDK for application and web agent development.
-
The Sun OpenSSO Enterprise 8.0 Java API Reference provides
information about the implementation of Java packages in OpenSSO Enterprise.
-
The Sun OpenSSO Enterprise Policy Agent 3.0 User’s Guide for Web Agents and Sun OpenSSO Enterprise Policy Agent 3.0 User’s Guide for J2EE Agents provide an overview of the
policy functionality and policy agents available for OpenSSO Enterprise.
Updates to the Release Notes and links
to modifications of the core documentation can be found on the OpenSSO Enterprise page
at docs.sun.com.
Updated documents will be marked with a revision date.
Related Product Documentation
The following table provides links to documentation for related
products.
Table P–1 Related Product Documentation
Searching Sun Product Documentation
Besides searching Sun product documentation from the docs.sun.comSM web site, you can use a search
engine by typing the following syntax in the search field:
search-term site:docs.sun.com
|
For example, to search for “broker,” type the following:
To include other Sun web sites in your search (for example, java.sun.com, www.sun.com, and developers.sun.com),
use sun.com in place of docs.sun.com in
the search field.
Documentation,
Support, and Training
The Sun web site provides information about the following additional
resources:
Third-Party Web Site References
Third-party URLs are referenced in this document and provide
additional, related information.
Note –
Sun is not responsible for the availability of third-party
web sites mentioned in this document. Sun does not endorse and is
not responsible or liable for any content, advertising, products,
or other materials that are available on or through such sites or
resources. Sun will not be responsible or liable for any actual or
alleged damage or loss caused or alleged to be caused by or in connection
with use of or reliance on any such content, goods, or services that
are available on or through such sites or resources.
Sun Welcomes Your Comments
Sun is interested in improving its documentation and welcomes
your comments and suggestions. To share your comments, go to http://docs.sun.com and click Send Comments.
In the online form, provide the full document title and part number.
The part number is a 7-digit or 9-digit number that can be found on
the book's title page or in the document's URL. For example, the title
of this book is Deployment Example: SAML v2 Using Sun OpenSSO Enterprise 8.0, and the part number is 820–5986.
Typographical Conventions
The following table describes the typographic conventions that
are used in this deployment example.
Table P–2 Typographic Conventions
|
Typeface
|
Meaning
|
Example
|
|
AaBbCc123
|
The names of commands, files, and directories, and onscreen
computer output
|
Edit your .login file.
Use ls -a to list all files.
machine_name% you have mail.
|
|
AaBbCc123
|
What you type, contrasted with onscreen computer output
|
machine_name% su
Password:
|
|
aabbcc123
|
Placeholder: replace with a real name or value
|
The command to remove a file is rm filename.
|
|
AaBbCc123
|
Book titles, new terms, and terms to be emphasized
|
Read Chapter 6 in the User's Guide.
A cache is a copy that is stored locally.
Do not save the file.
Note: Some emphasized items
appear bold online.
|
Default Paths and Directory Names
The OpenSSO Enterprise documentation uses the following terms
to represent default paths and directory names:
Table P–3 Default Paths and Directory
Names
|
Term
|
Description
|
|
zip-root
|
Represents the directory where the opensso_enterprise_80.zip file is decompressed.
|
|
OpenSSO-Deploy-base
|
Represents the directory where the web container deploys opensso.war. The location varies depending on the web container
used. To determine the value of OpenSSO-Deploy-base, view the file in the .openssocfg directory
(located in the home directory of the user who deployed opensso.war). For example, consider this scenario with Application
Server 9.1 as the web container:
The .openssocfg directory is in the root home directory (/), and the file name
in .openssocfg is AMConfig_opt_SUNWappserver_domains_domain1_applications_j2ee-modules_opensso_. Thus, the value for OpenSSO-Deploy-base is:
/opt/SUNWappserver/domains/domain1/applications/j2ee-modules/opensso
|
|
ConfigurationDirectory
|
Represents the name of the directory specified during the initial
configuration of OpenSSO Enterprise. The default is opensso in
the home directory of the user running the Configurator. Thus, if
the Configurator is run by root, ConfigurationDirectory is /opensso.
|