问题
I am building a scala play web application and I need to build the SSO functionality with an IdP which support SAML v2.0. In addition to SSO, I need to build authorization mechanism within the application based on the roles received from IdP as an attribute of Authentication Assertion message.
I am new to SAML and SSO area. Based on some quick learning about the SAML and available module options in Play scala, I see below options to use with scala play web application,
- Play-pac4J (for authentication and authorization)
- play2-auth (for authentication and authorization)
- Play-pac4J (for authentication) + Deadbolt (for authorization)
If someone having prior experience, please suggest me the best option to build a secure and a quick solution for SSO and authorization in scala play web application.
来源：https://stackoverflow.com/questions/33858451/sso-using-saml-2-0-for-scala-play-web-application