SAML v2 communication with standalone app.

Hi,
We want to establish single signon between an AM instance integrated webapp(App1) and another proprietary webapp(App2).
We are planning ot install v2 plugin in App1(In AM instance). We are not sure what exactly need to be done at App2 side, this application is deployed on weblogic and authenticates using oracle DB, we want this app to act as IDP and transfer assertion to App1 AM. SAML v2 can only be installed in AM/FM how can I use same functionality...i.e .generating assertion/receiving assertion etc in App1. From where can I get jars and documentation to create and send assertion. Please guide.
Thanks
Deepak

Hi ..I went thru...SSO samples...now according to my understanding...the SSO samples/amclient SDK should be used in an application that is deployed in the same instance in which AM is deployed???
Open SSL is just custom API to create and send assertion no requirement of AM there...Is it considered unsafe??
And last...We have our custom login in our application..and we want users to authenticate thru that module only....Now later we want to send assetion from AM ...According to my understanding that will require SSO Token...how ll then we can have session in AM as we are not authenticating thru AM...
Thanks for your help!!!

Similar Messages

  • Trouble with standalone app

    I got the standalone app to work using this command:
    java -Dorg.omg.CORBA.ORBInitialHost=localhost -Dorg.omg.CORBA.ORBInitialPort=3700 -classpath .;./CartAppClient.jar;./j2ee.jar;./appserv-rt.jar; CartClient CartBean
    Which allows me to run the client and server on seperate machines. I tried to add security to some of the methods using the deploy tool and it works when I use this command:
    appclient -client CartAppClient.jar
    but when I try the first command I mentioned it only says:
    Caught an unexpected exception!
    I would like to know:
    1) if I need to configure something else such as the Sun Server or something in the depoloy tool.
    2) if I need to go in and change the source code for the application to make it work.
    3) some documentation references online which can help me make this work.
    I would really appreciate some help on this one. Thanks

    The reason is that a stand-alone java client is not a portable J2EE component, but a J2EE Application Client is. From a J2EE platform perspective, the use of Application Clients is recommended since in that case your code is running with a type of J2EE container, albeit on the client side. This allows the infrastructure to provide many of the same services that are available to other kinds of J2EE components , e.g. access to java:comp/env, security, etc.
    There is no mention of stand-alone java clients in the J2EE specs. Many J2EE implementations describe how to make such clients work, but there is no standardization to this since it's outside the scope of the specs. Some products have a way to make authentication work in stand-alone clients as well but that suffers from the same portability problem.

  • Servlet communication with Java App.

    Hi currently I am working on a project in which with the current design I have to implement a servlet, which can communicate to other servlets and/or Java applications via calling their methods. I know that RMI would be ideal for this however, I do not want to have to setup or configure anything on the server end. Another approach I thought of was to extend the abilities of the servlet and Java app to communicate at the "socket" level, however this can cause issues when communicating through a firewall , I am sure there are workarounds. The last thing that I thought of was having the servlet and application communicate via the HTTP protocol and using HTTPMessage to pass arguments. This approach seems to be the easiest but I would have rather liked to access the Object methods of the two applications rather than send args back and forth. Again as mentioned technologies like RMI and CORBA would probably benifit me. While I don't know too much about CORBA I do know that RMI would require administration work which I would not like to deal with mostly b/c of paperwork and red tape.
    Any advice would be appreciated.
    thank you,
    Peyman m.

    HI,
    I think if your client is RMI, then you need to have RMI server running to answer that client.
    While here you have servlet as your server side component. So, I think in its orginal form servelet can not reply to RMI implelemnted client.
    The best approach I feel for the situatioin described by you is using java based HTTP classes.

  • Communication with other apps

    Hello. I have an application which should work on Windows and Mac Os. I need to use some VBScripts on windows and some applescripts on Mac. I have an idea but i don't know if it is good. Someone told that I should use RMI. My idea is to build an application on Windows in VB and on Mac in applesctipt. This application (depend of system) will be starting with my java app - using ProcessBuilder. I will send some informations by stdIn and get some responses by stdOut of this external application. I dont know if this is good solution. Maybe someone tried to do such think? Maybe there is some easier method?

    To be honest I don't know anything about AppleTalk. About VBScript the easiest way is to run the VBScript from java and take the output from its execution some way (from output file or from process output stream). I am not fan of VBScript but this is what I can say from prima vista. We usualy use COM components when a native calls are needed and access these via JNI and linked DLLs.

  • Communicating with Legacy App

    Can anyone point me in the right direction in terms of how to make a connection to an old mainframe type legacy application and communicate with it? I have an ip, user account and know that it has an open tcp port 111(sunrpc). The application uses the following protocol:
    Port: 23
    Terminal Type: VT100
    'Telnet Protocol' is ticked.

    I'm confused by the listing of two ports. The second port, 23, is, as you indicate, the telnet port. But it looks like you have a vt100 based application. If this is your only access to the mainframe then you'll need some sort of "screen scraper". I Googled a tiny bit and found a few that look like they might work - all were commercial. One I found is at http://www.jacada.com/apps/VT100/welcome.htm but there are others too.

  • Encrypting communication between an app that uses an ODBC/DSN (with ADODB) and SQL Server 2008 R2

    I've been doing a lot of reading the last couple of days on how we can encrypt db communication between our product app and a customer's SQL Server db, but cannot make it work as expected. The app uses a ODBC/DSN to connect to the SQL Server db. I use this
    ODBC app to setup the DSN (on a Windows 7 PC):
    C:\Windows\SysWOW64\odbcad32.exe
    The  DSNconnection uses the SQL Server driver 6.01.7601.17514 and has these properties:
    - WinNT authentication.
    - Client Config button: TCP/IP to <server-name>\<instance.-name>
    - Change to default db: <name-of-app-db>
    - Everything else is default setting.
    SQL Server is on the same Windowns 7 PC and has a self-signed cert installed (used IIS to generate it) and has the Force Enryption set to "yes".
    I have a test C# program that uses the ADODB 2.7.0.0 COM-wrapper, made by Visual Studio after adding a reference to the ADO 2.7 library version 6.1.7601.17857. The program creates an ADODB.Connection object that has a simple connection string: "DSN=<san-name>;UID=<user>;PWD=<password>". The
    program then creates an ADODB.Recordset object and reads and displays a field from a table.
    Works fine.
    If I go into SQL Server and set Force Encryption to "no," clear the cert, restart the SQL service, and then re-run the program, it works fine.
    Here's the kick. If I go into the DSN and select "Use strong encryption for data" the Test button on the DSN works—why does it work? The SQL Server is no longer encrypting the connection so an error should occur. If I run the test program, it works
    as well—why? I can look at the connection properties in the test program and see that ADODB has added the ";Encrypt-yes" stuff to the end of the connection string. Yet that option seems to have no effect.
    If I set the SQL instance back to Force Encryption:yes, enable the cert, restart the SQL service, and clear the DSN's "Use strong encryption for data" option, I can still connect to the db with the
    test program—why?
    What am I doing wrong? I need to be able to ensure that the communication between our app product and the SQL instance is encrypted, and that we get an error if the SQL instance does not support encrypted communications. We really don't want the customer
    to have to enable Force Encryption because they have other db's on their SQL Server that do not use encrypted communication, but they want to know that our product's communication channel with the db is encrypted.
    No, I can't change the app product's code at this point in time. I'm stuck with working with what a DSN called from ADODB has to offer.
    Also, how can I be sure that communications are encrypted? I mean, I've tried things like "SELECT * FROM sys.dm_exec_connections" but that doesn't help because I have no idea how to tie the list of sessions shown back to my test program, although
    I guess it's a good thing that some of the sessions listed show encrypt_option as TRUE.
    -glenn-

    Ah yes, very good point. It's easy to miss because you have to delete then recreate the DSN in order to change drivers. So I switched the DSN over to the SQL Native 11 driver.
    Now when I try to connect to the SQL instance as <computer-name>\<instance-name>, and without a cert on the server, I get "the target principal name is incorrect". Perfect; now we're getting somewhere!
    Change my DSN to use <fqdn>\<instance-name> and it works. This tells me that SQL Server has auto-generated a cert and named it <fqdn>. I would have expected the "cert fail" error, not a cert
    name mismatch, because I'm not using Trust Server Cert.
    So I load up my self-signed cert, and that works too.
    I am still confused as to why I'm not seeing the "cert fail" error when I have no cert loaded on the SQL Server. I am not using Force Encryption on the server at all, so wouldn't expect SQL Server to auto-create a cert when an Encrypt=yes request comes in,
    but apparently it does?
    I also ran into a problem with this:
    select c.session_id, c.encrypt_option, s.client_interface_name
    from sys.dm_exec_connections c
    join sys.sysprocesses s
      on c.session_id = s.session_id
    where s.dbid = db_id('MyDatabase')
    There is no s.client_interface_name, probably should be s.hostname. There's also no s.session_id. I thought maybe this should be s.sid, but then no rows ever come back. The c.session_id looks like 51 and 52, but the s.sid looks like a very long binary number,
    so these two fields cannot be joined. I don't know how to convert the sid's properly so that the join would work. Ah wait, I just found the s.spid column; the join works when that column is used (I assume that's correct anyhow).
    If I add a Thread.Sleep(30 seconds) to my C# program just before the connection is closed, this query shows me the session for the correct hostname has encrypt_option=TRUE.
    And I have to keep my fingers crossed that all the app I/O will still work properly after
    changing the driver. Probably a safe bet though.
    Think I'm ready to throw in the towel on getting the "cert fail/no SSL" error to appear.
    It does look like I am able to sufficiently show that the connection is encrypted when Encrypt=yes is used with the newer driver.
    Thank for all the help!
    -glenn-

  • App World Web Plugin Error: An error has occurred communicating with the BlackBerry App World Client.

    App World Web Plugin Error
    An error has occurred communicating with the BlackBerry App World Client.
    Please help me with this problem. I have a new Blackberry Storm 2. When I sign in, it asked me to get the BB appworld browser plug-in and connect my smartphone. So, i did connect it. Then, this message kept on popping out. I don't know how to fix it.

    Okay. this is what I do.
    I go onto http://appworld.blackberry.com/webstore/ & sign in. I then connect my phone & enter the device password. As soon as I do that, this comes up -> App World Web Plugin Error
    An error has occurred communicating with the BlackBerry App World Client.
    I don't know what's the problem & I've been searching for a solution but to no avail.

  • STANDALONE Apps with DPS?

    Hi. I am looking to create STANDALONE apps with Indesign and Digital Publishing Suite.
    I've tried to do it, but I can only create contents for Adobe Viewer!!  I need to make an app "independent from a viewer".
    Can DPS do it? 
    The exemple i've seen is the app "Hangar Soul" for iPad (is a free app you can download), with a top menu, a "page scroll in the downside" and interactive pages (they seems to be made with Digital Publishing Suite!!)
    Thanks in advance. Bye

    It is not clear if I can personalize the viewer with my icons and a new navigation logic with the Single Edition.
    For exemple:
    If I have these pages (folio1 folio2 and folio3, each one made by three pages, a b, c)
    1a. 2a. 3a.
    1b. 2b. 3b.
    1c. 2c. 3c.
    I need to navigate ever in the A level when I scroll in left or right folio. Not so in Adobe viewer.
    Exemple Adobe Viewer: 1a > 2a V 2b&lt;2a
    Exemple I want: 1a > 2a V 2b&lt;1a (NOT 2a!)
    <>^V represents the scrolls on iPad
    Versions professional and enterprise made the same things of Single edition, and other features, too? Or only Single edition make apps standalone?
    Thanks, bye

  • HT1349 I can not run the scanner in my main user, but only the second user and the same thing with updating apps! Why is this happening???

    I can not run the scanner in my main user, but only the second user and the same thing with updating apps! Why is this happening???

    Welcome to the Apple Community.
    Enter the details of her second account at system preferences> mail, contacts & calendars.

  • HT4356 I no longer have the option to share and print.  It used to be there but no longer but it is still available with other apps, eg, Pages.  Any solution?

    I no longer have the option to share and print in Numbers.  It used to be there as I have printed from it in the past but it has disappeared! I also use Pages and the option is still there with that app.  Does anyone have solution to this?

    I really don't understand.
    The menu item is available :
    Maybe, you didn't activate the tool :
    Yvan KOENIG (VALLAURIS, France) mardi 2 août 2011 23:10:17
    iMac 21”5, i7, 2.8 GHz, 4 Gbytes, 1 Tbytes, mac OS X 10.6.8 and 10.7.0
    My iDisk is : <http://public.me.com/koenigyvan>
    Please : Search for questions similar to your own before submitting them to the community
    To be the AW6 successor, iWork MUST integrate a TRUE DB, not a list organizer !

  • My girlfriend just bought a new iphone and needs me to help from home with her apps.  How can i see them? When I log in i see my apps and my music

    My girlfriend needs me to log in to itunes to help her w her apps. but when i do all i see are mine. i am logged into her acct???

    Welcome to the Apple Community.
    You can't keep swapping iTunes accounts to use other people's apps or you will locked out of changing back to your own account. I'm not sure how you can help her with her apps from another device.

  • Error in communicating with DCR server (Operations Manager 8.5)

    Hi,
    I just installed Operations Manager 8.5 on a new server. And, although I'm able to login to the OM, I'm unable to add any devices to the DCR. When attempting to add the device the following error is returned:
    "Error in communicating with DCR Server
    DCR Server may be down. Please start DCR server and then refresh the page. "
    The same error is returned when an attempt is made toaccess the screen to change the mode (standalone/master/slave.) However, according to pdshow output DCRServer is up and running:
    Process= DCRServer
    State  = Running normally
    Pid    = 9220
    RC     = 0
    Signo  = 0
    Start  = 7/29/2011 2:46:33 PM
    Stop   = Not applicable
    Core   = Not applicable
    Info   = DCRServer is up and running
    I've browsed the site and tried all suggestions for LMS since I didn't see any for OM. No success.
    Any/all suggestions are much appreciated.
    Kind regards,
    Bart

    It appears the answer is rather simple. According to a trusted source who works for a Cisco training partner, one must wait before even attempting a login into OM.
    Apparently,  it takes about 25 to 30 minutes for all the services to start. Any attempt to login to the OM may corrupt the  database. This is based on CiscoWorks.  When command "net stop crmdmgtd" is issued it takes about 5 minutes to stop the service and a confirmaiton that the service was stopped is displayed. However, when starting the service with "net start crmdmgtd"  there is no confirmation that it started successfully. One may look into ":\ program Files\CSCOpx\objects\dmgt\ready" directory for a _lock file." As long as the lock file is present one shouldn't  use the browser to login. However, I was advised the best approach is to restart the service and give it 30 minutes.
    It worked for me
    Kind regards,
    Bart.

  • Error in communicating with Excel Calculation Services

    When attempting to use Excel Web Access web part, I get "We're sorry. We ran into a problem completing your request. Please try that again in a few minutes."
    Checked event log and found
    There was an error in communicating with Excel Calculation Services
    http://my server:32843/49082a5d56c141629497dd8b28375f47/ExcelService*.asmx exception: The remote server returned an error: (503) Server Unavailable.
    [Session:
    User: ].
    I googled the error and, as suggested by various sources, rebooted the server. (Same issue occurs) I also tried disabling asp.net impersonation with no change.  Ideas?

    Hi ,
    Reason for the error :
    The Excel Services Application server computer is in a non-valid state and may need to be restarted.
    Resolution : (Before taking the step toward to restart the server, try the below option)
    Restart your excel service application app pool/ restart the excel service. (Reference :http://technet.microsoft.com/en-us/library/ee513104(v=office.14).aspx)
    If you have more than one application server in the farm , then try start the excel serviceto a different server.
    Regards,
    Senthil

  • TS1741 I have lost the original remote for my Apple TV. I went to install it at my fiancés house, and cannot use the remote app on my ipad or iPhone. Can I still control the Apple TV with the apps?

    I have lost the original remote for my Apple TV. I went to install it at my fiancés house, and cannot use the remote app on my ipad or iPhone. Can I still control the Apple TV with the apps?

    Welcome to the Apple Community.
    Your Apple TV may have become paired with another remote. Hold the remote close to and pointed at the Apple TV, hold down the menu and Rewind buttons together for 6 seconds or until you see a broken chain icon on screen.

  • TS1717 Having trouble running iTunes version 11.0.2 on a Dell Laptop running Windows 7 Professional Service Pack 1.  Keep getting an error message "the software required for communicating with iPods and mobile phones was not installed correctly..." reinst

    Having trouble when I launch iTunes (version 11.0.2) on my Dell Laptop running Windows 7 Professional (service pack 1).  I get an error message indicating software required to communicate with iPod and mobile phones was not installed correctly.  Do you want iTunes to try to repair this for you?  I normally respond with OK and it immediately tells me "could not be repaired.  Please reinstall iTunes..."  I have done this a number of times to no avail.

    I also notice Quicktime is not getting installed at all.
    That one is normal nowadays (ever since the iTunes versions 10.5.x).
    The software required for communicating with iPods and mobile phones was not installed correctly. Do you want iTunes to try to repair this for you?
    Let's try a standalone Apple Mobile Device Support install. It still might not install, but fingers crossed any error messages will give us a better idea of the underlying cause of why it's not installing under normal conditions.
    Download and save a copy of the iTunesSetup.exe (or iTunes64setup.exe) installer file to your hard drive:
    http://www.apple.com/itunes/download/
    Download and install the free trial version of WinRAR:
    http://www.rarlab.com/
    Right-click the iTunesSetup.exe (or iTunes64setup.exe), and select "Extract to iTunesSetup" (or "Extract to iTunes64Setup"). WinRAR will expand the contents of the file into a folder called "iTunesSetup" (or "iTunes64Setup").
    Go into the folder and doubleclick the AppleMobileDeviceSupport.msi (or AppleMobileDeviceSupport64.msi) to do a standalone AMDS install.
    (If it offers you the choice to remove or repair, choose "Remove", and if the uninstall goes through successfully, see if you can reinstall by doubleclicking the AppleMobileDeviceSupport.msi again.)
    Does it install (or uninstall and then reinstall) properly for you?
    If instead you get an error message during the install (or uninstall), let us know what it says. (Precise text, please.)

Maybe you are looking for