AEM SAML Authentication handler + CURL | Community
Skip to main content
V
VijayCh8
July 7, 2020
Solved

AEM SAML Authentication handler + CURL

  • July 7, 2020
  • 1 reply
  • 1560 views

Hi 

 

I have setup SAML auth handler on my AEM Authors and Publishers. Users are able to login and perform the required operations. My issue is - 

We use Jenkins/jules for build and release, jenkins uses cURL to upload and install code on the AEM instances. With SAML handler forwarding requests to IDP for authentication I am unable to get this working. In the past we used AEM system users but now we have a corp requirement to not use system accounds and use FID's with breakglass for password. Please share any ideas on how i can enable cURL to authenticate over SAML or if there are any workarounds

thanks for your help

regards- Vijay

    This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
    Best answer by leoberliant

    Despite the SAML configuration you still can log as a local user to CRXDe. For that you can possibly use someting like:

    curl -sv -X POST -u "admin:*******" -b <COOKIE FILE> --data "j_username=admin" --data "j_password=********" --data "j_workspace=crx.default" --data "j_validate=true" --data "_charset_=utf-8" http://<host>:<port>/libs/granite/core/content/login.html/j_security_check 

    1 reply

    L
    Adobe Employee
    leoberliantAdobe EmployeeAccepted solution
    Adobe Employee
    July 7, 2020

    Despite the SAML configuration you still can log as a local user to CRXDe. For that you can possibly use someting like:

    curl -sv -X POST -u "admin:*******" -b <COOKIE FILE> --data "j_username=admin" --data "j_password=********" --data "j_workspace=crx.default" --data "j_validate=true" --data "_charset_=utf-8" http://<host>:<port>/libs/granite/core/content/login.html/j_security_check 

      V
      VijayCh8Author
      July 23, 2020
      Thanks for the reponse. We are not allowed to use local / system users to upload and install code / jar files on AEM, we have a compliance requirement to use a FID on LDAP. Please addvice
      Terms & ConditionsAccessibility statement

      Loading footer...