Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

This page describes how to enable WS-Federation for an Apache Tomcat instance hosting Relying Party (RP) applications. Also note that from the 1.4.4 release, the Apache Tomcat Fediz plugin also supports SAML SSO. It is at present the only container plugin to support SAML SSO - all of the other plugins only support WS-Federation. Recent version of Apache CXF Fediz ship two Tomcat plugins, one for Apache Tomcat 7 and one for Apache Tomcat 8.

...

Code Block
xml
xml
    <Connector port="8443" protocol="org.apache.coyote.http11.Http11ProtocolHttp11NioProtocol" SSLEnabled="true"
               maxThreads="150" scheme="https" secure="true"
               keystoreFile="rp-ssl-key.jks" keyPass="tompass"
               keystorePass="tompass" sslProtocol="TLS" />

...

Code Block
xml
xml
  <Context> 
    <Valve className="org.apache.cxf.fediz.tomcat8tomcat.FederationAuthenticator"
      configFile="conf/fediz_config.xml" />
  </Context> 

...

Code Block
xml
xml
  <Host name="localhost" appBase="webapps"
        unpackWARs="true" autoDeploy="true">
    <Valve className="org.apache.cxf.fediz.tomcat8tomcat.FederationAuthenticator"
           configFile="conf/fediz_config.xml" />
  </Host>

...

Code Block
xml
xml
  <Context path="/fedizhelloworld" docBase="fedizhelloworld">
    <Valve className="org.apache.cxf.fediz.tomcat8tomcat.FederationAuthenticator"
      configFile="conf/fediz_config.xml" />
  </Context>

...