wso2is - Is it possible to use username without domain for authentication in WSO2 -
i created tenant name mycompany.com. within tenant, registered service provider name sp. after integrating application wso2, apps create saml authn request
<?xml version="1.0" encoding="utf-8"?> <saml2p:authnrequest assertionconsumerserviceurl="https://localhost:8443/myapp/auth/sso" destination="https://localhost:9443/samlsso" forceauthn="false" id="a2i70af753i64cce4ehj977h3h9085h" ispassive="false" issueinstant="2016-03-30t02:51:12.083z" protocolbinding="urn:oasis:names:tc:saml:2.0:bindings:http-post" version="2.0" xmlns:saml2p="urn:oasis:names:tc:saml:2.0:protocol"> <saml2:issuer xmlns:saml2="urn:oasis:names:tc:saml:2.0:assertion">sp@mycompany.com</saml2:issuer> <saml2p:nameidpolicy allowcreate="true" format="urn:oasis:names:tc:saml:2.0:nameid-format:persistent" spnamequalifier="sp"/> <saml2p:requestedauthncontext comparison="exact"> <saml2:authncontextclassref xmlns:saml2="urn:oasis:names:tc:saml:2.0:assertion">urn:oasis:names:tc:saml:2.0:ac:classes:passwordprotectedtransport</saml2:authncontextclassref> </saml2p:requestedauthncontext> </saml2p:authnrequest>
it redirect wso2 login page url:
https://localhost:9443/authenticationendpoint/login.do?commonauthcallerpath=%2fsamlsso&forceauth=false&passiveauth=false&tenantdomain=mycompany.com&sessiondatakey=22e974a4-1a42-4670-82f5-3538828d7d03&relyingparty=sp%40mycompany.com&type=samlsso&sp=sp&issaasapp=false&authenticators=googleoidcauthenticator%3agoogle%3bfacebookauthenticator%3afb%3bsamlssoauthenticator%3aadfs%3bbasicauthenticator%3alocal
i wondering why need passing tenant domain name part of username.
i.e:
username: user@mycompany.com
passwword: secret
can configure wso2 such takes domain name url parameter instead of appending username
username used in same format throughtout cases. so, tenant domain should there username.
Comments
Post a Comment