Joined the community
24-11-2020
5:01:23 AM
Offline
Customize the badges you want to showcase on your profile
Re: Initiate SAML logout request at IDP on session timeou...
ankitg2807
Level 1
0 likes
10 posts
0 solutions
Top badges earned
View profile
ankitg2807
- Adobe Experience Manager
40
0
0
Likes
Total Posts
Correct Reply
HI ,I have configured logout on aem and it is successfully logging out
user from aem & Okta , but after logout on Okta, okta submits a SAML
Logout response to SingleLogoutService .This service URL I gave as
/content/test/utils/secure/saml_logout , but when response is posted to
this endpoint from okta, it get 500 errror in AEM as below -
org.apache.sling.api.resource.PersistenceException: Resource at
'/content/test/utils/secure/saml_logout' is not modifiablePlease can you
let me know what should...
Views
Likes
Replies
Re: Initiate SAML logout request at IDP on session timeout on AEM.
ankitg2807
Level 1
0 likes
10 posts
0 solutions
Top badges earned
View profile
ankitg2807
- Adobe Experience Manager
48
0
0
Likes
Total Posts
Correct Reply
HI ,I have configured logout on aem and it is successfully logging out
user from aem & Okta , but after logout on Okta, okta submits a SAML
Logout response to SingleLogoutService .This service URL I gave as
/content/test/utils/secure/saml_logout , but when response is posted to
this endpoint from okta, it get 500 errror in AEM as below -
org.apache.sling.api.resource.PersistenceException: Resource at
'/content/test/utils/secure/saml_logout' is not modifiablePlease can you
let me know what should...
Views
Likes
Replies
Re: User Synchronization between publish for SAML Authent...
ankitg2807
Level 1
0 likes
10 posts
0 solutions
Top badges earned
View profile
ankitg2807
- Adobe Experience Manager
74
0
0
Likes
Total Posts
Correct Reply
How to enable User Sync between the 2 publishers ?
Views
Likes
Replies
User Synchronization between publish for SAML Authentication
ankitg2807
Level 1
0 likes
10 posts
0 solutions
Top badges earned
View profile
ankitg2807
- Adobe Experience Manager
117
0
4
Likes
Total Posts
Correct Reply
Hi,I have configured SAML Authn Handler to enable login on website. We
have 2 publish instances behind 2 dispatchers and a
loadbalancer.Encapsulated tokens are enabled on the 2 publish instances
. When we login , user gets created on the publish instance serving the
request but on refresh the request goes to 2nd publish instance and I
get 404. On 2nd publish instance I can see the username of loggedin user
in access log but the same user is not present in useradmin and request
shows 404. How can...
Views
Likes
Replies
Re: AEM 6.4 translation for ContentFragments not working!
ankitg2807
Level 1
0 likes
10 posts
0 solutions
Top badges earned
View profile
ankitg2807
- Adobe Experience Manager
66
0
0
Likes
Total Posts
Correct Reply
Hi,I tried adding the for my custom component in my custom
site config translation_rules.xml but it didn't work. I then added my
custom component to the global config using this :
http://localhost:4502/libs/cq/translation/translationrules/contexts.html
. After adding to global config, content fragments in my custom
component started getting added to translation project. Is this ok ? Do
we always add to global config ? Thanks!
Views
Likes
Replies
Re: Role based authorization after SAML Authentication
ankitg2807
Level 1
0 likes
10 posts
0 solutions
Top badges earned
View profile
ankitg2807
- Adobe Experience Manager
213
0
0
Likes
Total Posts
Correct Reply
Hi,Thanks for pointing this out. As I mentioned earlier I dont have
fixed groups which I can preset in AEM. Groups keep getting created &
deleted in Active Directory. The filter I have written works fine for
".html" but was allowing access to page json as you mentioned, so I
changed the filter to run on ".json" also and that prevents access to
page json also. Is this approach fine ? Will the filter cause any
performance issue since it will evaluate all html & json requests
?Thanks!
Views
Likes
Replies
Re: Role based authorization after SAML Authentication
ankitg2807
Level 1
0 likes
10 posts
0 solutions
Top badges earned
View profile
ankitg2807
- Adobe Experience Manager
252
0
0
Likes
Total Posts
Correct Reply
Thanks for your comments. I have written Servlet filter code in which I
am able to get page properties , including security groups. But before
that I need to check if the page is secured or not. I am not able to get
"cq:authenticationRequired" or "jcr:mixinTypes" in filter code. These
are set when we check 'Enable Authentication' checkbox in Advanced page
properties. In CRX DE , I dont see "cq:authenticationRequired" in
jcr:content node properties, I do see "jcr:mixinTypes" as property of
page n...
Views
Likes
Replies
Re: Role based authorization after SAML Authentication
ankitg2807
Level 1
0 likes
10 posts
0 solutions
Top badges earned
View profile
ankitg2807
- Adobe Experience Manager
226
0
0
Likes
Total Posts
Correct Reply
Thanks for your response . Actually the groups are not fixed . New
groups keep getting created for different campaigns , so I need to build
it in a way so that I can assign any group to a page and during login
Okta will tell me whether the user is part of that group. Following the
filter approach suggested by sanketk90166544
Views
Likes
Replies
Role based authorization after SAML Authentication
ankitg2807
Level 1
0 likes
10 posts
0 solutions
Top badges earned
View profile
ankitg2807
- Adobe Experience Manager
412
0
9
Likes
Total Posts
Correct Reply
Hi, I have a requirement to add role based authorization for some secure
pages. I want to set a property for pages called "Security Groups". This
property will contain group names which shall have access to that page.
I have configured SAML authn handler with Okta IDP . After login when
SAML response is submitted to AEM ACS url , viz -
/content/****/saml_login , I want to read the "Security Groups" from
page property and groups of loggedin user from SAML response , and if
there is a match betwee...
Views
Likes
Replies
SAML authentication does not redirect to original page
ankitg2807
Level 1
0 likes
10 posts
0 solutions
Top badges earned
View profile
ankitg2807
- Adobe Experience Manager
199
0
1
Likes
Total Posts
Correct Reply
Hi,We have configured SAML Authn handler in our AEM 6.5 . We have a
public page (ex - /content/test/mypage.html ) which has a link to login
page , ex - /content/test/login.html.Login page URL is configured in
SAML Authentication handler & Sling Authentication Service. On click of
login link, we redirect to
http://localhost:4503/content/test/login.html?saml_request_path=http://localhost:4503/content/test/mypage.html
. This takes us to Okta IDP login page and Okta then submits SAML
response to ACS...
Views
Likes
Replies
