4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster Copyright (c) 2007 Sun Microsystems Inc. All Rights Reserved
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster The contents of this file are subject to the terms
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster of the Common Development and Distribution License
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster (the License). You may not use this file except in
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster compliance with the License.
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster You can obtain a copy of the License at
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster https://opensso.dev.java.net/public/CDDLv1.0.html or
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster See the License for the specific language governing
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster permission and limitations under the License.
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster When distributing Covered Code, include this CDDL
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster Header Notice in each file and include the License file
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster If applicable, add the following below the CDDL Header,
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster with the fields enclosed by brackets [] replaced by
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster your own identifying information:
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "Portions Copyrighted [year] [name of copyright owner]"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster $Id: configure.jsp,v 1.6 2008/11/25 23:50:42 exu Exp $
45cbbdf2c42e20970c2539ba6cc4b94c2599c3d7Kohei Tamura Portions Copyrighted 2012 ForgeRock Inc
45cbbdf2c42e20970c2539ba6cc4b94c2599c3d7Kohei Tamura Portions Copyrighted 2012 Open Source Solution Technology Corporation
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster<title>Configure Service Provider</title>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster<link rel="stylesheet" type="text/css" href="../../../com_sun_web_ui/css/css_ns6up.css"/>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster String errorMsg = null;
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster<%@ include file="../util.jspf"%>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster import="com.sun.identity.federation.meta.IDFFMetaManager,
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster com.sun.identity.multiprotocol.SingleLogoutManager,
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster com.sun.identity.saml2.meta.SAML2MetaException,
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster com.sun.identity.saml2.jaxb.entityconfig.EntityConfigElement,
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster com.sun.identity.saml2.jaxb.metadata.EntityDescriptorElement,
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster if (localAuthUrl != null) {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster out.println("<script language=\"Javascript\">");
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster out.println("top.location.replace('" + localAuthUrl + "');");
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster boolean doneConfiguration = false;
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster boolean alreadyConfigured = false;
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster String hostedSPEntityID = null;
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster String remoteIDPEntityID = null;
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster String fedProtocol = null;
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster String proto = request.getParameter("proto");
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster String host = request.getParameter("host");
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster String port = request.getParameter("port");
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster String deploymenturi = request.getParameter("deploymenturi");
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster if ((localAuthUrl == null) && (errorMsg == null)) {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster // fedProtocol would be value of "saml2", or "idff" or "ws-fed"
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster fedProtocol = request.getParameter(PROTOCOL_PARAM_NAME);
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster hostedSPEntityID = baseURL.trim() + "/" + SAMPLE_PREFIX +
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster fedProtocol + SP_SUFFIX;
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster if ((proto != null) && (host != null) && (port != null) &&
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster (deploymenturi != null)) {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster deploymenturi = deploymenturi.trim();
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster if ((proto.length() > 0) && (host.length() > 0) &&
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster (port.length() > 0) && (deploymenturi.length() > 0) &&
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster if (deploymenturi.charAt(0) != '/') {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster deploymenturi = "/" + deploymenturi;
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster remoteIDPEntityID = new StringBuffer()
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster .append(proto).append("://").append(host).append(":")
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster .append(port).append(deploymenturi).append("/")
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster .append(SAMPLE_PREFIX).append(fedProtocol)
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster .append(IDP_SUFFIX).toString();
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster if (fedProtocol.equals(SingleLogoutManager.SAML2)) {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster configureSAML2ServiceProvider(remoteIDPEntityID,
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster hostedSPEntityID, request);
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster doneConfiguration = true;
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster } else if (fedProtocol.equals(SingleLogoutManager.IDFF)) {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster configureIDFFServiceProvider(remoteIDPEntityID,
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster hostedSPEntityID, request);
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster doneConfiguration = true;
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster } else if (fedProtocol.equals(SingleLogoutManager.WS_FED)) {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster configureWSFedServiceProvider(remoteIDPEntityID,
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster hostedSPEntityID, request);
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster doneConfiguration = true;
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster errorMsg = "Invalid federation protocol " + fedProtocol;
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster } catch (Exception clie) {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster errorMsg = "Required fields are missing.";
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster checkCurrentSPConfiguration(baseURL.trim() + "/" +
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster SAMPLE_PREFIX, ssoToken);
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster } catch (Exception e) {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster alreadyConfigured = true;
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster<body class="DefBdy">
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster<div class="MstDiv"><table width="100%" border="0" cellpadding="0" cellspacing="0" class="MstTblTop" title="">
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster<td nowrap="nowrap"> </td>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster<td nowrap="nowrap"> </td>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster</tr></tbody></table>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster<table width="100%" border="0" cellpadding="0" cellspacing="0" class="MstTblBot" title="">
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster<td class="MstTdTtl" width="99%">
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster<div class="MstDivTtl"><img name="ProdName" src="../../../console/images/PrimaryProductName.png" alt="" /></div></td><td class="MstTdLogo" width="1%"><img name="RMRealm.mhCommon.BrandLogo" src="../../../com_sun_web_ui/images/other/javalogo.gif" alt="Java(TM) Logo" border="0" height="55" width="31" /></td></tr></tbody></table>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster<table class="MstTblEnd" border="0" cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td><img name="RMRealm.mhCommon.EndorserLogo" src="../../../com_sun_web_ui/images/masthead/masthead-sunname.gif" alt="Sun(TM) Microsystems, Inc." align="right" border="0" height="10" width="108" /></td></tr></tbody></table></div><div class="SkpMedGry1"><a name="SkipAnchor2089" id="SkipAnchor2089"></a></div>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster<div class="SkpMedGry1"><a href="#SkipAnchor4928"><img src="../../../com_sun_web_ui/images/other/dot.gif" alt="Jump Over Tab Navigation Area. Current Selection is: Access Control" border="0" height="1" width="1" /></a></div>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster<table border="0" cellpadding="10" cellspacing="0" width="100%">
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster if (!loggedIn) {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster <p> </p>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster You have not logged in to this Service Provider. Click
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster <a href=<%= baseURL+"/UI/Login?goto=" + baseURL + "/" + baseURI %>>here</a> to login .
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster if (!doneConfiguration) {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster<h3>Configuring this instance as Service Provider</h3>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster<form action="configure.jsp" method="GET">
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster This sample will create and load metadata for a hosted Service Provider
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster and a remote Identity Provider. <br/>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster It will also setup circle of trust for the two providers.
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster <p> </p>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster <table border=0 cellpadding=5 cellspacing=0>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster if (errorMsg != null) {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster <td colspan="2" align="center">
45cbbdf2c42e20970c2539ba6cc4b94c2599c3d7Kohei Tamura <b><font color="red"><%= errorMsg %></font></b>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster if (!alreadyConfigured) {
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster <td colspan="2">Please provide the remote Identity Provider (must also be an
b93185b577f7150fec37f9999b95b246d73bf63cjeff.schenk OpenAM instance) information:</td>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster <td valign="center" width="25%">Federation Protocol:</td>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster <td align="left">
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster <input name="spFederationProtocol" type="radio" value="saml2"/>SAML2<br/>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster <input name="spFederationProtocol" type="radio" value="idff"/>IDFF<br/>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster <input name="spFederationProtocol" type="radio" value="wsfed"/>WS-Federation<br/>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster <td valign="center">Protocol:</td>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster <input name="proto" type="radio" value="http" />HTTP<br/>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster <input name="proto" type="radio" value="https" />HTTPS<br/>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster <td>Host:</td>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster <td><input name="host" type="text" size="30" value="" /></td>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster <td>Port:</td>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster <td><input name="port" type="text" size="6" value="" /></td>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster <td>Deployment URI:</td>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster <td><input name="deploymenturi" type="text" size="15" value="" /></td>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster <td colspan="2" align="center">
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster <input type="submit" value="Configure" />
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster <input type="reset" value="Reset" />
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster String idpBaseUrl = proto + "://" + host + ":" + port + deploymenturi;
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster String idpSampleUrl = idpBaseUrl +
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster String redirectURL = idpSampleUrl + "?" + SP_BASE_URL +
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster "=" + baseURL + "&" + PROTOCOL_PARAM_NAME + "=" + fedProtocol;
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster<p> </p>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan FosterHosted Service Provider <%= hostedSPEntityID %> is created.
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster<p> </p>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan FosterRemote Identity Provider <%= remoteIDPEntityID %> is created.
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster<p> </p>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan FosterCircle of Trust <%= SAMPLE_COT_NAME %> is created.
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster<p> </p>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Foster<p> </p>
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan FosterService Provider is configured. Click <a href="<%= redirectURL %>">here</a> to configure
4fe4e4f798a84a46e567f64ceadd3648eb0582d4Allan Fosterremote Identity Provider.