Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-10100

Improve CDSSO instruction for using SAML Integrated mode

    Details

    • Sprint:
      AM 2019.14 - Rotary Mill, AM 2019.15 - Gears
    • Story Points:
      2
    • Support Ticket IDs:

      Description

      In https://backstage.forgerock.com/docs/openam/13.5/admin-guide/chap-cdsso, the steps only mentioned about steps for integrating CDSSO with the old SAML2 Federation (standalone mode)

      The federation mechanism associated with SAML v2.0 can be used as an alternative to CDSSO for both Web and Java EE policy agents. While using SAML v2.0 adds complexity, it supports attribute mapping, which may be useful when the two domains are associated with data stores that use different attribute names. For details, see Using Policy Agents With Standalone Mode . 
      

      There is no mention about the steps needs for SAML2 integrated mode. Although this may be like the same for other Authentication module, it is best to mentioned that if SAML2 integrated mode (ie thru SAML2 Authentication module), that specifying the login URL or to select the module/service that has SAML2 will do (passing the module/service chain). (The steps mentioned "Using Policy Agents With Standalone Mode" be confusing for users that do not know what "Standalone mode" mean).

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                chris.lee Chris Lee
                Reporter:
                chee-weng.chea C-Weng C
              • Votes:
                1 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: