SSOS Client

From OpenLiberty.org Wiki

Jump to: navigation, search

← Back to Architecture Document

org.openliberty.services.SSOSClient

The ID-WSF Single Sign-On Service ("SSOS") provides a mechanism for obtaining SAML2 assertions and security tokens required to interact with SAML 2.0 Service Providers (which can also be ID-WSF WSPs). This is one of at least two ways these tokens can be obtained by a WSC in order to enable interaction with a WSP. According to the Single Sign-On Service section of the LibertyAuthnContext document (section 6), there are cases where the Authentication Service to Discovery Service model is not employed, and instead a direct interaction with an SSOS is used.

WSC Access to WSP Diagram Image:ol_as_ssos_diagram.png

The openLiberty SSOS Client will be tested against several SAML2 implementations.

The ClientLib:

  • MUST support the SAML 2.0 Enhanced Client SSO Profile
Personal tools