Versions Compared

Old Version 12

changes.mady.by.user Kevin Minder

Saved on

compared with

New Version 13

changes.mady.by.user Kevin Minder

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
PlantUML
border1
titleREST SSO Flow (SAML)
hide footbox
autonumber

participant "Client\n(eg JEE App)" as cli
participant "SAML IdP\n(eg Shibboleth)" as idp
participant "Knox\nGW" as gw #lime
participant "Hadoop\n(eg NN)" as svc #lime
 
activate cli

group text
cli -> idp: /authenticate.POST(username,password)
  activate idp 
  cli <-- idp: ok200(saml-assertion)
  deactivate idp
end
 

cli -> gw: /cluster/service.GET(jwt-bearer-token-cookie)
  activate gw
  gw -> svc: /service.GET(username)
  activate svc
  gw <-- svc: ok200(results)
  deactivate svc
  cli <-- gw: ok200(results)
  deactivate gw

deactivate cli
PlantUML
border1
titleREST SSO Flow (SAML)
hide footbox
autonumber

participant "Client\n(eg JEE App)" as cli
participant "SSO\n(eg Shibboleth)" as sso
participant "Knox\nGW" as gw #lime
participant "LDAP" as idp
participant "Hadoop\n(eg NN)" as svc #lime
 
activate cli

cli -> sso: /authenticate.POST(username,password)
  activate sso 
  cli <-- sso: saml-bearer-token[username]
  deactivate sso
 
cli -> gw: /cluster/service.GET(jwt-bearer-token)
  activate gw
  gw -> idp: lookupGroups(username):groups
  gw -> svc: /service.GET(username)
  activate svc
  gw <-- svc: ok200(results)
  deactivate svc
  cli <-- gw: ok200(results)
  deactivate gw

deactivate cli

...