Security Assertion Markup Language (SAML)

This Q&A forum allows users to post and respond to "How Do I Do ....." questions. Please do not use to report (suspected) errors - you must use your regional help desk for this. The information contained in this forum has not been validated by LANSA and, as such, LANSA cannot guarantee the accuracy of the information.
Post Reply
aidom
Posts: 9
Joined: Sat Sep 16, 2017 1:03 am

Security Assertion Markup Language (SAML)

Post by aidom »

While searching through LANSA documentation for information on SSO methodologies, I noticed Security Assertion Markup Language (SAML) is not mentioned anywhere. Can Security Assertion Markup Language (SAML) be used with LANSA websites? Are there any working examples and supplemental SAML documentation?
Dominik
Posts: 21
Joined: Fri Jun 10, 2016 12:14 pm

Re: Security Assertion Markup Language (SAML)

Post by Dominik »

SAML isnt natively supported but could be implemented via a third party object (i.e. dot net control).

Also, the latest EPC (EPC142060) ships a sample via the Package Manager which shows how to use OAuth2 verification via Google/Facebook/Microsoft. The sample itself fairly complicated RDMLX code; lots of reusable parts and inheritance etc but it shows that it can be done within LANSA.
aidom
Posts: 9
Joined: Sat Sep 16, 2017 1:03 am

Re: Security Assertion Markup Language (SAML)

Post by aidom »

I truly appreciate your reply Dominik! I'm not sure if this is a coincidence, but I believe some related information/logic that I recently received might have been written by you.

Based on other LANSA correspondence, the general consensus is that this is indeed complicated subject matter and I'm getting several 'No longer with LANSA' responses to requests for information and resources. :|
Dominik
Posts: 21
Joined: Fri Jun 10, 2016 12:14 pm

Re: Security Assertion Markup Language (SAML)

Post by Dominik »

SAML is indeed a complicated beast.
I was looking at what pre-packaged solutions are out there when i found this site: https://medium.com/the-new-control-plan ... d9691e2d43

One of the solutions i looked into was OpenSAML (for Java), but it seems that original article was out of date and this is no longer supported. In fact they have a pretty big disclaimer at the top: "The author encourages anybody using that code to seek other options or, preferably, stop implementing SAML yourself and use an existing implementation."

One good thing about LANSA is that it has the ability to interact with external programs as well, so if there is something that isnt possible within LANSA, chances are there is an external program that can do it (which you can hook into from LANSA). Dont be discouraged by the initial response, it just means we need to dig further.
Post Reply