DocTeger

OpenSSO Technical Information

And a Spoonful of Music

To Make the Medicine Go Down

Use SOAP 1.1 with OpenSSO Security Token Service

OpenSSO Enterprise 8.0 contains a Security Token Service. The Security Token Service verifies the credentials in a request presented by a web services client and, in response, issues a security token to provide proof that the client has authenticated with the Security Token Service. The web services client presents the security token to the web service which verifies that it was issued by a trusted Security Token Service. SOAP enables the exchange of these messages using a variety of underlying protocols. Out of the box, the Security Token Service supports SOAP 1.2 as a binding, a formal set of rules for transporting the messages. In order to enable SOAP 1.1 as a binding, make the following changes to before deploying the OpenSSO WAR.

1. Download and unzip opensso.zip.
2. Extract the contents of opensso.war using the jar command.
3. Change into the WEB-INF/wsdl directory.
4. Replace the default famsts.wsdl with the modified famsts.wsdl available here.
   Backup the original famsts.wsdl.
5. Change into the WEB-INF directory.
6. Replace the default sun-jaxws.xml with the modified sun-jaxws.xml available here.
   Backup the original sun-jaxws.xml.
7. Modify the web.xml also located in the WEB-INF directory by adding the following two entries to the file as positioned below.

   
   <url-pattern>/sts/mex</url-pattern>
   </servlet-mapping>
   
   <servlet-mapping>
         <servlet-name>sts</servlet-name>
         <url-pattern>/sts/soap11</url-pattern>
     </servlet-mapping>
    
     <servlet-mapping>
           <servlet-name>sts</servlet-name>
           <url-pattern>/sts/mexsoap11</url-pattern>
     </servlet-mapping>
    
   <session-config>
      <session-timeout>60</session-timeout>
   </session-config>
   

8. Archive a modified opensso.war, deploy it as usual and OpenSSO will be ready to use SOAP 1.1 as a binding for the Security Token Service.

Posted at 02:31PM Jan 13, 2009 by Michael Teger in Sun  |  Comments[5]