How do you enable saml_login? | Community
Skip to main content
J
joed62279101
October 16, 2015
Solved

How do you enable saml_login?

  • October 16, 2015
  • 6 replies
  • 2915 views

Hello, I am working on a proof of concept to integrate Adobe AEM 5.6 with SSO using SAML. I followed the demonstration documentation located here: http://helpx.adobe.com/experience-manager/kb/saml-demo.html. This document shows the following entry in metata/adobecq.xml

<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://localhost:6502/saml_login" index="1"/>

When accessing AEM I am prompted to enter credentials by the IdP and after successfully authenticating it attempts to redirect me back to this http://localhost:6502/saml_login which is not available. It does not appear that anything AEM is listening on port 6502. Is there some service that needs to be enabled that is not enabled?

Any help would be greatly appreciated.

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by JustinEd3

That would suggest that the SAML Authentication Handler isn't being fired. You might want to increase logging on it.

http://dev.day.com/content/docs/en/cq/current/core/administering/saml-2-0-authenticationhandler.html is the main documentation for this feature.

6 replies

M
MorisTM
October 16, 2015

If your instance is actually on port 4502, you may need to update this in adobecq.xml

J
Adobe Employee
JustinEd3Adobe Employee
Adobe Employee
October 16, 2015

The Location attribute needs to be whatever host/port CQ is available on. In that particular example, CQ is running on localhost:6502. If you are using a different host/port, then specify a different Location attribute.

J
joed62279101Author
October 16, 2015

That is what I would have thought too, but the rest of the documentation at that page indicates that AEM is running on 4502. so I assumed some saml listener was running on 6502. Anyhow, I tried changing that to 4502 and I get caught in a loop. When the callback redirects to localhost:4502/saml_login it then redirects back to the IdP.

Is there any additional documentation available on this subject?

J
joed62279101Author
October 16, 2015

I also see this when I access that on 4502 - 

URI=/saml_login resolves to Resource=NonExistingResource, path=/saml_login

 

So there must be some additional configuration to enable this that I cannot find any documentation on.

J
Adobe Employee
JustinEd3Adobe EmployeeAccepted solution
Adobe Employee
October 16, 2015

That would suggest that the SAML Authentication Handler isn't being fired. You might want to increase logging on it.

http://dev.day.com/content/docs/en/cq/current/core/administering/saml-2-0-authenticationhandler.html is the main documentation for this feature.

Sham_HC
Sham_HC
October 16, 2015

Do you have any other authentication configured?  Increase the ranking of saml authentication handler and verify.

What king of document you are looking for ?  Troubleshooting saml integration ?

Terms & ConditionsAccessibility statement

Loading footer...