Page 1 of 1
Security Assertion Markup Language (SAML)
Posted: Sat Dec 07, 2019 8:01 am
by aidom
While searching through LANSA documentation for information on SSO methodologies, I noticed Security Assertion Markup Language (SAML) is not mentioned anywhere. Can Security Assertion Markup Language (SAML) be used with LANSA websites? Are there any working examples and supplemental SAML documentation?
Re: Security Assertion Markup Language (SAML)
Posted: Mon Dec 09, 2019 10:55 am
by Dominik
SAML isnt natively supported but could be implemented via a third party object (i.e. dot net control).
Also, the latest EPC (EPC142060) ships a sample via the Package Manager which shows how to use OAuth2 verification via Google/Facebook/Microsoft. The sample itself fairly complicated RDMLX code; lots of reusable parts and inheritance etc but it shows that it can be done within LANSA.
Re: Security Assertion Markup Language (SAML)
Posted: Tue Dec 10, 2019 12:32 am
by aidom
I truly appreciate your reply Dominik! I'm not sure if this is a coincidence, but I believe some related information/logic that I recently received might have been written by you.
Based on other LANSA correspondence, the general consensus is that this is indeed complicated subject matter and I'm getting several 'No longer with LANSA' responses to requests for information and resources.

Re: Security Assertion Markup Language (SAML)
Posted: Tue Dec 10, 2019 11:17 am
by Dominik
SAML is indeed a complicated beast.
I was looking at what pre-packaged solutions are out there when i found this site:
https://medium.com/the-new-control-plan ... d9691e2d43
One of the solutions i looked into was OpenSAML (for Java), but it seems that original article was out of date and this is no longer supported. In fact they have a pretty big disclaimer at the top: "The author encourages anybody using that code to seek other options or, preferably, stop implementing SAML yourself and use an existing implementation."
One good thing about LANSA is that it has the ability to interact with external programs as well, so if there is something that isnt possible within LANSA, chances are there is an external program that can do it (which you can hook into from LANSA). Dont be discouraged by the initial response, it just means we need to dig further.