Adobe SME - Has AEM 6.1 closed the ability to extend SAML authentication class? SamlAuthenticationHandler | Community
Skip to main content
Level 4
January 28, 2016
Solved

Adobe SME - Has AEM 6.1 closed the ability to extend SAML authentication class? SamlAuthenticationHandler

  • January 28, 2016
  • 6 replies
  • 1568 views

We had implemented custom SAML handler and with 6.1 this would make it tough for us to migrate/

Can i get an answer from Adobe Folks on this?

com.adobe.granite.auth.saml.SamlAuthenticationHandler

is this class no longer extensible in 6.1? and why?

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by chaotic

Hello chetanvajre2014

Yes, the SAML authentication handler implementation is no longer exported (since 5.6.1 IIRC). As a proprietary implementation it has never been intended to be extended on project level and had only been exported by 'accident'. 

However, most of the reusable functionality is available from the helper classes in com.adobe.granite.auth.saml.util - these can be used or extended freely in case a custom SAML handler implementation is necessary for your project.

Best greetings

Lars

6 replies

smacdonald2008
Level 10
January 28, 2016

I sent this question to the AEM Eng team. 

Adobe Employee
January 28, 2016

Hi,

while waiting for an official answer, I came across the same issue and it seems you are correct in your assumption, but can you explain why you needed the custom authentication handler? This is to see if their is an alternative approach you could use.

Regards,

Opkar

chaoticAdobe EmployeeAccepted solution
Adobe Employee
January 29, 2016

Hello chetanvajre2014

Yes, the SAML authentication handler implementation is no longer exported (since 5.6.1 IIRC). As a proprietary implementation it has never been intended to be extended on project level and had only been exported by 'accident'. 

However, most of the reusable functionality is available from the helper classes in com.adobe.granite.auth.saml.util - these can be used or extended freely in case a custom SAML handler implementation is necessary for your project.

Best greetings

Lars

Level 4
January 29, 2016

Custom authentication was implemented for us by Adobe Professional Services. We do a bunch of cleanup after logging in including completely destroying old memberships and creating new ones etc.

 

Lars (below in the thread) recommended using com.adobe.granite.auth.saml.util to achieve the same results. Should we try that?

Adobe Employee
January 29, 2016

chetanvajre2014 wrote...

Custom authentication was implemented for us by Adobe Professional Services. We do a bunch of cleanup after logging in including completely destroying old memberships and creating new ones etc.

 

Lars (below in the thread) recommended using com.adobe.granite.auth.saml.util to achieve the same results. Should we try that?

 

This would be the recommended approach.

Regards,

Opkar

Level 2
May 23, 2016

chetanvajre2014 wrote...

Custom authentication was implemented for us by Adobe Professional Services. We do a bunch of cleanup after logging in including completely destroying old memberships and creating new ones etc.

 

Lars (below in the thread) recommended using com.adobe.granite.auth.saml.util to achieve the same results. Should we try that?

 

Could you possibly share a sample of how can we customize the SAML based authentication i.e. adding a single element extra in our SAML Request to the IDP ?

Thanks,

Hemant