AEM 6.4 - Author - Intercept SAML2 Authentication

[robertol6836527]

HI,

on Adobe Aem 6.4 Author machine login via Saml2 is active.

I would need to intercept user logins made via Saml2, what can I do?

Thank you

[EstebanBustamante]

Can you elaborate on "intercept user logins"? If you are referring to checking how the data flows( viewing SAML messages), you could use something like this Chrome extension.https://chromewebstore.google.com/detail/saml-tracer/mpdajninpobndbfcldcmbpnnbhibjmch

Hope this helps 

[robertol6836527]

HI,

I should intercept Saml logins from a Java stream.

Thank you

[arunpatidar]

Please check https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/need-info-aem-6-2-ability-... 

https://medium.com/@lars.auffarth/building-an-aem-custom-authentication-handler-for-okta-openid-conn... 

[robertol6836527]

HI,
Thanks for the reply.

I cannot use the two suggested methodologies.

The first where AuthenticationInfoPostProcessor is used is not practicable as it is called for every single operation performed on the CMS, both Author and Publish. It is very demanding in terms of performance.

The second one is to create a Custom Authentication Handler is not possible as I am not allowed to create it.

Are there no alternative solutions?

Thank you

[arunpatidar]

Hi @robertol6836527 
You need to extend the existing SAML implementation if you want to intercept and extend the OOTB SAML integration.

e.g.

public class ExtSamlAuthenticationHandler extends DefaultAuthenticationFeedbackHandler implements AuthenticationHandler {

[robertol6836527]

HI,

thanks for the answer but I have to look for an alternative route to the one suggested, I can't create a CustomAuthenticationHandler.

I have to find an alternative.

Greetings

[kautuk_sahni]

@robertol6836527 Did you find the suggestions from users helpful? Please let us know if more information is required. Otherwise, please mark the answer as correct for posterity. If you have found out solution yourself, please share it with the community.