blocks|key|1122813|text|您可以尝试使用OpenSAML+project；它提供了一个用于创建和验证SAML令牌的Java库。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1122814|entityMap|0|LINK|mutability|MUTABLE|url|https://wiki.shibboleth.net/confluence/display/OS30/Home^0|7|G|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@$A|M|B|N|1|O]]|C|$]]|$1|D|3|-4|5|6|7|P|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]]]

You can try the <a href="https://wiki.shibboleth.net/confluence/display/OS30/Home" rel="nofollow noreferrer">OpenSAML project</a>; it provides a Java library for creating and validating SAML tokens.

blocks|key|1337852|text|http://www.softwareborsen.dk/projekter/softwarecenter/brugerstyring/oio-saml-java|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1337853|entityMap|0|LINK|mutability|MUTABLE|url^0|0|29|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@$A|L|B|M|1|N]]|C|$]]|$1|D|3|-4|5|6|7|O|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|4]]]]

<a href="http://www.softwareborsen.dk/projekter/softwarecenter/brugerstyring/oio-saml-java" rel="nofollow noreferrer">http://www.softwareborsen.dk/projekter/softwarecenter/brugerstyring/oio-saml-java</a>

blocks|key|1122874|text|你需要的一切都在OpenSSO+site上，OpenAM是它的继任者。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1122875|entityMap|0|LINK|mutability|MUTABLE|url|https://opensso.dev.java.net/|1|http://openam.forgerock.org/^0|8|C|0|M|6|1|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@$A|O|B|P|1|Q]|$A|R|B|S|1|T]]|C|$]]|$1|D|3|-4|5|6|7|U|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]|L|$5|G|H|I|C|$J|M]]]]

Everything you need was at the <a href="https://opensso.dev.java.net/" rel="nofollow noreferrer">OpenSSO site</a>, with <a href="http://openam.forgerock.org/" rel="nofollow noreferrer">OpenAM</a> as it's successor.

blocks|key|1337936|text|在最近为一个应用程序实现了SAML身份验证之后，我在OASIS+SAML2技术概述文档中找到了最有用的信息。它具有非常好的可读性，并且包含所传递的XML消息的真实示例。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1337937|第5.1节介绍了让应用程序(服务提供商或SP)向远程身份提供商(Idp)请求身份验证的交互。|1337938|http://wiki.oasis-open.org/security/Saml2TechOverview|offset|length|1337939|entityMap|0|LINK|mutability|MUTABLE|url^0|0|0|0|1H|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|P|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|Q|8|@]|9|@$F|R|G|S|1|T]]|A|$]]|$1|H|3|-4|5|6|7|U|8|@]|9|@]|A|$]]]|I|$J|$5|K|L|M|A|$N|E]]]]

Having recently implemented SAML authentication for an application I found the most useful information in the OASIS SAML2 technical overview document. It's very readable and contains real examples of the XML messages that are passed.

Section 5.1 describes the interaction of having YOUR application (service provider or SP) request authentication to a remote identity provider (Idp).

<a href="http://wiki.oasis-open.org/security/Saml2TechOverview" rel="noreferrer">http://wiki.oasis-open.org/security/Saml2TechOverview</a>

blocks|key|1337992|text|提供更多最新的答案，因为这里已经有一段时间没有人访问了：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1337993|如果你已经在做一个spring项目，我已经用Spring+Security+SAML取得了成功。使用SAML扩展并不一定要使用Spring+Security来保护您的应用程序，尽管这样做会更容易一些。|1337994|http://projects.spring.io/spring-security-saml/|offset|length|1337995|entityMap|0|LINK|mutability|MUTABLE|url^0|0|0|0|1B|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|P|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|Q|8|@]|9|@$F|R|G|S|1|T]]|A|$]]|$1|H|3|-4|5|6|7|U|8|@]|9|@]|A|$]]]|I|$J|$5|K|L|M|A|$N|E]]]]

Providing more up to date answer since this hasn't been visited in a while:

If you're doing a spring project already I've had success with Spring Security SAML. You do not have to be securing your app with Spring Security to use the SAML extension, though it make it a bit easier.

<a href="http://projects.spring.io/spring-security-saml/" rel="nofollow">http://projects.spring.io/spring-security-saml/</a>

I'd like to write a web application which does the authentication using SAML 2.0 tokens, issued by an identity provider. I understand, according to this <a href="https://stackoverflow.com/questions/806131/how-to-implement-saml-sso">question</a>, that there is a viable solution in the PHP world using <a href="http://rnd.feide.no/simplesamlphp" rel="nofollow noreferrer">simpleSAMLphp</a>. 

Is there an equivalent method in the Java world? Are there out of the box solutions and/or tutorials for common <code>servlet</code> containers or application servers?

Web SSO using Java and SAML 2.0

身份验证

服务器

容器

Java

我想编写一个web应用程序，它使用由身份提供商颁发的SAML 2.0令牌进行身份验证。据我所知，根据这个，在PHP界有一个可行的使用的解决方案。在Java世界中有没有等价的方法？对于常见的servlet容器或应用服务器，是否有开箱即用的解决方案和/或教程？

问使用Java和SAML 2.0的Web单点登录
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问使用Java和SAML 2.0的Web单点登录EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问使用Java和SAML 2.0的Web单点登录
EN