SAML integration with AEM

[afshan_khader]

Hi All,

I am trying to integrate AEM 6.1 with forgerock - Open AM. I am totally new to SSO integrations. I have tried and below

These are the steps I have followed in Open AM.

1. I have installed Open AM 12.0.0 in my machine.
2. I have created an IDP , downloaded the idp_cert.xml.
3. I have created a SP using a sample metadata file found online which provides redirection URL to – http://localhost:4502

In AEM

1. I have uploaded the idp_cert.pem file in saml node under /etc/key.
2. I have configured SAML Authentication Handler
3. I have configured Apache Sling Referrer filter as well.

Now, whenever I am hitting http://localhost:4502 , the URL is getting re-directed to Open AM and I am getting logged into Open AM instead of redirecting back to AEM. This is the issue I am facing.

I feel I have missed few steps.

1. I am not understanding how to create users in AEM / Open AM to authenticate them.

2. And how to create metadata in AEM to make it a SP in Open AM.

If any one help me on this with detailed steps if possible , I would be greatfull.

Regards,

Afshan

[smacdonald2008]

Support has written a KB that may help you: 

https://helpx.adobe.com/experience-manager/kb/simple-saml-demo.html