wso2is

Import CA signed certificates to JKS

随声附和 提交于 2019-12-03 22:47:44
问题 I got 4 .crt files from a CA as follows, AddTrustExternalCARoot.crt COMODORSADomainValidationSecureServerCA.crt COMODORSAAddTrustCA.crt demo_site_domain.crt second and third are intermediate certificates. I want to import .crt file(s) to wso2carbon.jks store and replace it with the existing jks of a wso2 server as documented here. My problem is, document wants wso2carbon as the alias, but I can import only one certificate using that alias, therefore which .crt file should I import? Or should

WSO2 Identity server 5.0 - Pre configured Service provider

只谈情不闲聊 提交于 2019-12-03 21:18:46
We would like to ship wso2 IS with our product.Instead of adding service providers manually through console, we want to pre-configure with some default identity providers and Service providers. I was expecting some xml files by which I can configure these. But seems like there is no such file and previous versions of IS has SCIM rest points to add SP configurations, I don't see them with IS 5.0. Any idea on how to go about this? Asela There is file that you can configure the service providers. You can locate the sso-idp-config.xml file in <IS_HOME>/repository/conf/security directory. You can

Unable to access XACML policy in wso2is-5.6.0 from wso2am-2.5.0 getting error

纵然是瞬间 提交于 2019-12-03 18:18:25
问题 i following link Created XACML policy in wso2is. Accessing from wso2AM created one POST type function. While sending request in wso2AM store getting an error I have update "jndi.properties" file by commenting second "/test" url line. After that i am getting error. ERROR - EntitlementMediator Error occurred while evaluating the policy org.wso2.carbon.identity.entitlement.proxy.exception.EntitlementProxyException: Cannot initialize EntitlementServiceStub with null Axis2 configuration context.

WSO2 - Identity Server and API Manager working together

隐身守侯 提交于 2019-12-03 08:40:28
I'm evaluating WSO2 Identity Server and WSO2 API Manager. I registered an API and an application on API Manager. I can call the resources successfully. I could also add an user into Identity Server and log into that using oAuth authentication. But, it's not too clear how I can use those two systems together. I would like to use API Manager to expose my API's to some applications. And, I would like to use Identity Server to log the final user. Is that possible? How can I "plug" those two systems? I am not sure if that's the best way to do that, so, please, advice me. Thanks According to my

WSO2 IS login with Radius / Kerberos

断了今生、忘了曾经 提交于 2019-12-02 16:29:44
问题 The picture bellow shows the architecture that I need to deploy, and it explains my problem. I already designed a sub system that contains a set of applications (web services, web applications) deployed in apache tomcat. To provide the SSO functionality to my sub-system I used the WSO2 Identity Server with SAML2.0 to authenticate users and get access to all sub-system applications. This sub system is destined to be integrated into enterprises environment and work together with enterprise

WSO2 IS 5.1.0 Empty SignatureValue and DigestValue in SAML Assertion

你离开我真会死。 提交于 2019-12-02 14:38:08
问题 When I get SAML Assertion from Identity Server, DigestValue and SignatureValue are empty :\ Assertion: <?xml version="1.0" encoding="UTF-8"?><saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="lhgklipdcdifghfbehlmdbbghndlgdpbdeggppjd" IssueInstant="2016-12-28T10:22:35.668Z" Version="2.0" xmlns:xs="http://www.w3.org/2001/XMLSchema"><saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">localhost</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000

WSO2 IS Single Logout partially working

筅森魡賤 提交于 2019-12-02 14:13:20
问题 I am testing SAML SSO using WSO2 Identity Server 5.0.0 with two PHP application instances as service providers (using onelogin phpsaml). I managed to make the single sign on to work but now I'm facing a problem with single logout. When I trigger a logout request from the PHPApp1, WSO2 IDP responds with a logout response and it seems to works fine; WSO2 IDP triggers a logout request to the saml session particants, in this case to the PHPApp2; The PHPApp2 handles the logout request and redirect

Unable to configure WSO2 identity server for openID

只谈情不闲聊 提交于 2019-12-02 13:31:53
问题 The problem appears when configuring the server to work with a real host name and not with localhost. I followed the links at http://wso2.org/forum/thread/19721 but this doesn't worked. Scenario: version 3.2.3 Download wso2is, extract, execute: everything works fine, openID provider is localhost now I want to use "whatever.myDomain.com" as openID provider name Download wso2is, extract, create the store with the new name by following http..://blog.facilelogin.com/2010/12/deploying-wso2

Unable to publish XACML policy in wso2 application manager and throwing NoSuchMethodError exception

ε祈祈猫儿з 提交于 2019-12-02 13:26:31
问题 I followed the steps provided by the below links to create a policy in the wso2 application manager and publshing http://wso2.com/library/articles/2014/02/use-of-wso2-api-manager-to-validate-fine-grained-policy-decisions-using-xacml/ After created the XACML Policy trying to publish it to PDP,getting the following error [2014-09-15 15:52:53,007] ERROR - ApplicationDispatcher Servlet.service() for servlet bridgeservlet threw exception java.lang.NoSuchMethodError: org.wso2.carbon.identity

WSO2 API Manager user authencation email

五迷三道 提交于 2019-12-02 10:53:33
I have setup a WSO2 API Manager. When I create a user in WSO2 using web console/ using admin services, I want to send a user activation email with link to the user. Can someone point me to documentation OR steps to do this? I am using MySQL to store my users. EDIT: I am using WSO2 API Manager version 2 EDIT: When I try to access https://:9443/services/UserInformationRecoveryService?wsdl WSDL is not found. What are steps to install UserInformationRecoveryService in WSO2 API Manager? You can use UserInfoRecoveryService for this requirement. You may need to install Account and credential