Comments (7)
Scott McCrory said:
Committed first draft to CVS for Ben’s review.
from spring-security.
Scott McCrory said:
In CVS there is now net.sf.acegisecurity.ui.webapp.SiteminderAuthenticationProcessingFilter (with a corresponding test class net.sf.acegisecurity.ui.webapp.SiteminderAuthenticationProcessingFilterTests).
This will let you use Siteminder as an authentication entry point by stripping off a unique user ID (and optional password) from the HTTP header (where Siteminder places its info after the user authenticates through it). It optionally will fall back to form input in cases where you don’t have Siteminder installed on development stations, etc. I put this code into production in a very large financial organization 9/28, so it’s getting “combat experience” as we speak.
I don’t have any formal documentation ready, but it should be somewhat straightforward (the class itself is very small). Please have a look and let me know if you have any questions – I’m very interested in getting feedback.from spring-security.
Ben Alex said:
Scott, how are we going with this? Can this issue be closed?
from spring-security.
Scott McCrory said:
SiteminderAuthenticationProcessingFilter is working great in production, with no issues thus far, so the capability is ready to be closed for Acegi release. I should put some docs together for it though. Would you recommend that a section in the user’s manual be added? If so, what file(s) should I edit and where in the doc does this best fit? Thanks, Scott.
from spring-security.
Ben Alex said:
Scott, yes, please add a description of SiteMinder generally as well as how the Acegi Security implementation works to /doc/docbook/acegi.xml. I usually use XMLMind editor (free download), but any DocBook editor will do.
from spring-security.
Scott McCrory said:
About 30% done with the documentation now and will be finished by 11/1. I’ve slotted it just afterJAAS Authentication.
from spring-security.
Scott McCrory said:
Done! Feel free to close.
from spring-security.
Related Issues (20)
- OAuthClient fails on 2nd login attempt - Auth Server suceeds on both - Concurrent Sessions set to > 1
- Redis Serialisation Error HOT 1
- The variable targetClassToUse is not passed into the synthesize method
- Option to modify SAML20AssertionValidators.attributeValidator in OpenSaml4AuthenticationProvider
- Update spring-test to Mock TestContext in Tests
- Consider adding a discovery client for `ClientRegistrations`
- Consider Updating to LdapClient
- EnableMethodSecurity should publish only one bean of each AuthorizationAdvisor
- Observable session events
- Document @CurrentSecurityContext
- Add AuthorizationDeniedException(String) constructor
- EnableMethodSecurity should publish only one bean of each AuthorizationAdvisor HOT 1
- Getting Jackson Serialisation Error - not sure what / why (to do with Redis) HOT 1
- SecurityExpressionRoot to be made resolvable as an argument
- Consider a `OneTimeToken` integration with Spring MVC HOT 1
- Methods annotated with @PostFilter are processed twice by PostFilterAuthorizationMethodInterceptor HOT 4
- CasAuthenticationEntryPoint does not support multiple service addresses
- SpringSessionBackedReactiveSessionRegistry removeSessionInformation hasn't been implemented
- redisAuthorizedClientRepository not being called, but redisReactiveOAuth2AuthorizedClientService is? HOT 2
- Security Context being called twice for every endpoint on Spring API Gateway HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from spring-security.