Forums

Home » Liferay Portal » English » Liferay Legacy

Combination View Flat View Tree View
Threads [ Previous | Next ]
Showing 1 - 20 of 53 results.
of 3
Alex Ballarin
SAML support within Liferay?
April 27, 2007 9:08 AM
Answer

Alex Ballarin

Rank: Junior Member

Posts: 33

Join Date: November 18, 2006

Recent Posts

Hi all,

I have been looking for Google Apps integrations and they use SAML SSO (see: en.wikipedia.org/wiki/SAML).

I have seen articles explaining Tomcat integration with other systems using SAML, so I thought that could be achieved by Liferay (so we could use its powerful directory, user admin).

Any ideas will be greatly appreciated, since I need to integrate it with a portal or if I cannot, with simple web apps.

Thanks
Alex
Jonas Yuan
RE: SAML support within Liferay?
June 24, 2010 7:10 AM
Answer

Jonas Yuan

Rank: Liferay Master

Posts: 993

Join Date: April 26, 2007

Recent Posts

There are a few customers that have same requirements: SAML 2.0 SSO integration in Liferay portal.

Any updates?

http://issues.liferay.com/browse/LPS-8427

Thanks

Jonas Yuan
-----------------
The Author of Liferay Books:
Liferay Portal 6 Enterprise Intranets
Liferay Portal 5.2 Systems Development
Liferay Portal Enterprise Intranets
Franck Valetas
RE: SAML support within Liferay?
October 6, 2010 7:06 AM
Answer

Franck Valetas

Rank: New Member

Posts: 1

Join Date: September 14, 2010

Recent Posts

I'm a customer with this requirement : SAML 2.0 SSO integration in Liferay portal.

Regards.

Franck
Mika Koivisto
RE: SAML support within Liferay?
October 8, 2010 6:03 AM
Answer

Mika Koivisto

LIFERAY STAFF

Rank: Liferay Legend

Posts: 1505

Join Date: August 7, 2006

Recent Posts

I've been lately looking into SAML 2.0 and there might be something coming in 6.1
Jonas Yuan
RE: SAML support within Liferay?
October 8, 2010 5:11 PM
Answer

Jonas Yuan

Rank: Liferay Master

Posts: 993

Join Date: April 26, 2007

Recent Posts

Good news. Thank you, Mika.

Would you be able to share the time frame? When is this integration expected?

Best regards,

Jonas Yuan

-----------------
The Author of Liferay Books:
Liferay User Interface Development for Liferay 6.0 and 6.1
Liferay Portal 6 Enterprise Intranets
Liferay Portal 5.2 Systems Development
Liferay Portal Enterprise Intranets
Oleg Cohen
RE: SAML support within Liferay?
November 2, 2010 6:19 PM
Answer

Oleg Cohen

Rank: New Member

Posts: 2

Join Date: November 2, 2010

Recent Posts

Franck,

AssureBridge provides a fully-managed, hosted SAML 2.0 Single Sign-On service which includes an easy to implement Liferay SSO Adapter.

For more information please visit our web site: http://www.assurebridge.com.

Best,
Oleg Cohen
Karolin Anna Heiss
RE: SAML support within Liferay?
November 10, 2010 4:25 AM
Answer

Karolin Anna Heiss

Rank: Junior Member

Posts: 53

Join Date: December 17, 2009

Recent Posts

Hey Mika

We use Liferay 6.0.5.
My Company already works with a SAML PHP solution, so the AssureBridge is no option for us.
You recently told that there is something in the pipline? Can you please give an update if a solution for SAML 2.0 is coming?

Thank you very much for a quick answer,

Karolin
Bruno Vernay
RE: SAML support within Liferay?
November 10, 2010 8:52 AM
Answer

Bruno Vernay

Rank: Junior Member

Posts: 36

Join Date: April 6, 2010

Recent Posts

I don't know if it could solve anyone's problem, but I managed to have:
  • Liferay authenticates with OpenAM (ex openSSO) with the direct integration provided by Liferay
  • SimpleSamlPHP using OpenAM too, with SAML 2

So I have SSO between Liferay and PHP applications.
Also, it is out of my scope currently, but OpenAM integrates with Google Apps.

(note: I don't know what will and can be done with SAML, but I was a bit deceived (with LDAP and openSSO) to find that authentication is a narrow subject and doesn't include user provisioning and full attributes and groups mapping.)
Mika Koivisto
RE: SAML support within Liferay?
November 10, 2010 10:47 AM
Answer

Mika Koivisto

LIFERAY STAFF

Rank: Liferay Legend

Posts: 1505

Join Date: August 7, 2006

Recent Posts

SAML 2.0 IdP implementation will come with Liferay 6.1. The service provider part is not scheduled yet but you should be able to use Shibboleth with Liferay even with the current release.
Karolin Anna Heiss
RE: SAML support within Liferay?
November 11, 2010 11:55 PM
Answer

Karolin Anna Heiss

Rank: Junior Member

Posts: 53

Join Date: December 17, 2009

Recent Posts

http://issues.liferay.com/browse/LPS-8427 got updated to priority 'critical' with fix version/s '--Sprint - 12/10, 6.1.X'

I can't find the information when 6.1.X will be released?
Mika Koivisto
RE: SAML support within Liferay?
November 12, 2010 10:13 AM
Answer

Mika Koivisto

LIFERAY STAFF

Rank: Liferay Legend

Posts: 1505

Join Date: August 7, 2006

Recent Posts

There's no official release date for 6.1 yet but I wouldn't expect it any time soon as we just released 6.0 a few months ago.
Oleg Cohen
RE: SAML support within Liferay?
November 28, 2010 9:07 AM
Answer

Oleg Cohen

Rank: New Member

Posts: 2

Join Date: November 2, 2010

Recent Posts

Mika,

The AssureBridge SAML SSO solution includes Liferay plugins for both SAML SP and IdP integration. Our plugins are intended for those teams implementing Liferay that don't have exisiting SAML expertise/product and are not planning to acquire it. Our plugins are part of a fully-managed hosted SSO solution that includes connection set-up, configuration, and integration assitance. Using our services you can be up and running in just a few days.

For more info please visit our site at http://www.assurebridge.com.

Best,
Oleg Cohen
Ivan Morozov
RE: SAML support within Liferay?
January 14, 2011 4:59 AM
Answer

Ivan Morozov

Rank: New Member

Posts: 1

Join Date: December 2, 2010

Recent Posts

Oleg,

Are there any configuration guide for SAML Single Sign-On Plugin 1.0.1 ?
Bruno Vernay
RE: SAML support within Liferay?
January 17, 2011 1:59 AM
Answer

Bruno Vernay

Rank: Junior Member

Posts: 36

Join Date: April 6, 2010

Recent Posts

So if I understand correctly, the LPS-8427 is about "SAML Identity Provider" only.

I would need Liferay to be a SAML "Service Provider".

You said that I should be able to use Liferay with Shibboleth already, but how if there is no SAML in Liferay ?? Do you mean CASify the Shibboleth http://code.google.com/p/casshib/ ?

Should I fill an Issue to request for a SAML SP (like the existing LDAP, CAS, NTML, FaceBook, OpenSSO, OpenID, SiteMinder) ??

Regards
Bruno
Mika Koivisto
RE: SAML support within Liferay?
January 17, 2011 10:34 AM
Answer

Mika Koivisto

LIFERAY STAFF

Rank: Liferay Legend

Posts: 1505

Join Date: August 7, 2006

Recent Posts

There are several ways to do that. CASShib is one. Another one would be using shibboleth and header based authentication. Shibboleth SAM L SP is a Apache modules that handles all the saml communication and then can provide the user information as headers to Liferay. You could use Liferay's SiteMinder SSO for this as it's also similar header based AutoLogin.
Bruno Vernay
RE: SAML support within Liferay?
January 31, 2011 5:56 AM
Answer

Bruno Vernay

Rank: Junior Member

Posts: 36

Join Date: April 6, 2010

Recent Posts

So I can loging using Site Minder, but it is far from optimal.
  • Logout is not handled
  • I cannot follow Shibboleth best practices

I can't help to think that a SAML SP integration would be really useful. At least to me ...
Mika Koivisto
RE: SAML support within Liferay?
January 31, 2011 11:13 AM
Answer

Mika Koivisto

LIFERAY STAFF

Rank: Liferay Legend

Posts: 1505

Join Date: August 7, 2006

Recent Posts

There is a SP implementation also coming. A community member provided a patch against trunk and I'm working on turning it into a plugin. We did the same thing with the IdP implementation. IdP functionality will most likely be EE only.
Bruno Vernay
RE: SAML support within Liferay?
February 10, 2011 6:07 AM
Answer

Bruno Vernay

Rank: Junior Member

Posts: 36

Join Date: April 6, 2010

Recent Posts

Could you warn me as soon as it is in SVN ??
Any delay ? days, weeks, month ???
I can test and report since I already have a working Shibboleth IdP/SP installation with Liferay's SiteMinder authentication.

My problem is that I have a very specific need (SAML for an ECP "Extended Client or Proxy" profile, in order to execute a delegated scenario) which I explain a bit here.

I am already able to read the SAML assertion in a post login hook and put it in the session so a portlet can use it. Now I have to implement the second part: the portlet has to use the assertion to authenticate against a webservice provider. Hopefully I should be able to leverage uPortal work.

Meanwhile, I voted for the SAML SP support: http://issues.liferay.com/browse/LPS-8427 The patch is very impressive, he redeveloped Shibboleth SP without the OpenSAML library.

Regards
Bruno
Mika Koivisto
RE: SAML support within Liferay?
February 17, 2011 3:29 PM
Answer

Mika Koivisto

LIFERAY STAFF

Rank: Liferay Legend

Posts: 1505

Join Date: August 7, 2006

Recent Posts

We won't be supporting ECP profile at this point how ever it will probably come later as it's in the roadmap of the customer sponsoring this work. I will post here as soon as the SP plugin hits SVN.
Danilo Tuler
RE: SAML support within Liferay?
March 22, 2011 5:20 AM
Answer

Danilo Tuler

Rank: New Member

Posts: 4

Join Date: January 27, 2011

Recent Posts

Any progress on SAML integration?
Is Idp support really coming only on EE version? That's too bad.

Danilo
Showing 1 - 20 of 53 results.
of 3