在wso2中为API存储应用程序设置默认IdP

Question

我使用Identity Server作为密钥管理器的集群环境。我一直试图使用隐式和授权授权来测试我们的应用程序和JWT声明。当我创建一个应用程序时，它将自己设置为Local＆amp; amp;的服务提供商。出站身份验证作为默认值而不是我们使用SAML for Shibboleth的联合身份验证。我跟着这个post，我厌倦了它的多种变化。我尝试在[IS_HOME] / repo / conf / identity / service-provider中配置两个文件。 default.xml和sp_dashboard.xml。当我配置sp_dashboard时似乎没有任何反应。但是当我配置default.xml并尝试通过隐式授权获取访问令牌时，我收到此错误。

此外，没有任何配置，一切正常，但要求用户使用隐式授权和授权授权再次登录。然后，当您使用隐式授权登录时，我会使用URL中的访问令牌获取碳，但授权会将我带到碳，而无需使用任何代码。

LOG ERROR

TID: [-1234] [] [2017-01-09 14:48:36,323] ERROR {org.wso2.carbon.identity.application.authentication.framework.handler.request.impl.DefaultRequestCoordinator} -  Exception in Authentication Framework java.lang.IndexOutOfBoundsException: Index: 0, Size: 0
    at java.util.ArrayList.rangeCheck(ArrayList.java:653)
    at java.util.ArrayList.get(ArrayList.java:429)
    at org.wso2.carbon.identity.application.authentication.framework.handler.step.impl.DefaultStepHandler.handle(DefaultStepHandler.java:208) at org.wso2.carbon.identity.application.authentication.framework.handler.sequence.impl.DefaultStepBasedSequenceHandler.handle(DefaultStepBasedSequenceHandler.java:173)
    at org.wso2.carbon.identity.application.authentication.framework.handler.request.impl.DefaultAuthenticationRequestHandler.handle(DefaultAuthenticationRequestHandler.java:121)
    at org.wso2.carbon.identity.application.authentication.framework.handler.request.ipl.DefaultRequestCoordinator.handle(DefaultRequestCoordinator.java:137)
    at org.wso2.carbon.identity.application.authentication.framework.CommonAuthenticationHandler.doPost(CommonAuthenticationHandler.java:46)
    at org.wso2.carbon.identity.application.authentication.framework.CommonAuthenticationHandler.doGet(CommonAuthenticationHandler.java:37)
    at org.wso2.carbon.identity.oauth.endpoint.authz.OAuth2AuthzEndpoint.sendRequestToFramework(OAuth2AuthzEndpoint.java:1062)
    at org.wso2.carbon.identity.oauth.endpoint.authz.OAuth2AuthzEndpoint.authorize(OAuth2AuthzEndpoint.java:203)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at org.apache.cxf.service.invoker.AbstractInvoker.performInvocation(AbstractInvoker.java:188) at org.apache.cxf.service.invoker.AbstractInvoker.invoke(AbstractInvoker.java:104)
    at org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:204)
    at org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:101)
    at org.apache.cxf.interceptor.ServiceInvokerInterceptor$1.run(ServiceInvokerInterceptor.java:58)
    at org.apache.cxf.interceptor.ServiceInvokerInterceptor.handleMessage(ServiceInvokerInterceptor.java:94)
    at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:272)
    at org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)
    at org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:249)
    at org.apache.cxf.transport.servlet.ServletController.invokeDestination(ServletController.java:248)
    at org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:222)
    at org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:153)
    at org.apache.cxf.transport.servlet.CXFNonSpringServlet.invoke(CXFNonSpringServlet.java:171)
    at org.apache.cxf.transport.servlet.AbstractHTTPServlet.handleRequest(AbstractHTTPServlet.java:289)
    at org.apache.cxf.transport.servlet.AbstractHTTPServlet.doGet(AbstractHTTPServlet.java:214)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:624)
    at org.apache.cxf.transport.servlet.AbstractHTTPServlet.service(AbstractHTTPServlet.java:265

页面错误

以下是我目前的配置

SP_DASHBOARD

<ServiceProvider>
    <ApplicationID>2</ApplicationID>
    <ApplicationName>wso2_sp_dashboard</ApplicationName>
    <Description>Default Service Provider</Description>
    <InboundAuthenticationConfig>
            <InboundAuthenticationRequestConfigs>
                    <InboundAuthenticationRequestConfig>
                            <InboundAuthKey>wso2.my.dashboard</InboundAuthKey>
                            <InboundAuthType>samlsso</InboundAuthType>
                            <Properties></Properties>
                    </InboundAuthenticationRequestConfig>
            </InboundAuthenticationRequestConfigs>
    </InboundAuthenticationConfig>
    <LocalAndOutBoundAuthenticationConfig>
            <AuthenticationSteps>
                    <AuthenticationStep>
                            <StepOrder>1</StepOrder>
                            <FederatedIdentityProviders>
                            <IdentityProvider>
                                   <Name>IdPSSO</Name>
                                 <FederatedAuthenticatorConfigs>
                                         <FederatedAuthenticatorConfig>
                                                 <Name>SAMLSSOAuthenticator</Name>
                                         </FederatedAuthenticatorConfig>
                                 </FederatedAuthenticatorConfigs>
                             </IdentityProvider>
                            </FederatedIdentityProviders>
                            <SubjectStep>true</SubjectStep>
                            <AttributeStep>true</AttributeStep>
                    </AuthenticationStep>
            </AuthenticationSteps>
            <UseUserstoreDomainInUsername>true</UseUserstoreDomainInUsername>
            <UseTenantDomainInUsername>false</UseTenantDomainInUsername>
    </LocalAndOutBoundAuthenticationConfig>
   <RequestPathAuthenticatorConfigs></RequestPathAuthenticatorConfigs>
   <InboundProvisioningConfig></InboundProvisioningConfig>
    <OutboundProvisioningConfig></OutboundProvisioningConfig>
    <ClaimConfig>
      <AlwaysSendMappedLocalSubjectId>true</AlwaysSendMappedLocalSubjectId>
   </ClaimConfig>
    <PermissionAndRoleConfig></PermissionAndRoleConfig>

默认

<ServiceProvider>
    <ApplicationID>1</ApplicationID>
    <ApplicationName>default</ApplicationName>
    <Description>Default Service Provider</Description>
    <InboundAuthenticationConfig>
            <InboundAuthenticationRequestConfigs>
                    <InboundAuthenticationRequestConfig>
                            <InboundAuthKey>default</InboundAuthKey>
                            <InboundAuthType></InboundAuthType>
                            <Properties></Properties>
                    </InboundAuthenticationRequestConfig>
            </InboundAuthenticationRequestConfigs>
    </InboundAuthenticationConfig>
    <LocalAndOutBoundAuthenticationConfig>
            <AuthenticationSteps>
                    <AuthenticationStep>
                            <StepOrder>1</StepOrder>
                            <FederatedIdentityProviders>
                             <IdentityProvider>
                                   <Name>IdPSSO</Name>
                                 <FederatedAuthenticatorConfigs>
                                         <FederatedAuthenticatorConfig>
                                                 <Name>SAMLSSOAuthenticator</Name>
                                         </FederatedAuthenticatorConfig>
                                 </FederatedAuthenticatorConfigs>
                             </IdentityProvider>
                            </FederatedIdentityProviders>
                            <SubjectStep>true</SubjectStep>
                            <AttributeStep>true</AttributeStep>
                    </AuthenticationStep>
            </AuthenticationSteps>
    </LocalAndOutBoundAuthenticationConfig>
    <RequestPathAuthenticatorConfigs></RequestPathAuthenticatorConfigs>
    <InboundProvisioningConfig></InboundProvisioningConfig>
    <OutboundProvisioningConfig></OutboundProvisioningConfig>
    <ClaimConfig>
      <AlwaysSendMappedLocalSubjectId>true</AlwaysSendMappedLocalSubjectId>
   </ClaimConfig>
    <PermissionAndRoleConfig></PermissionAndRoleConfig>

Answer 1

找出我必须做的配置。它位于IS default.xml中。看起来IsEnabled是我的配置中缺少的重要部分。

<FederatedIdentityProviders>
    <IdentityProvider>
      <IdentityProviderName>IdPSSO</IdentityProviderName>
          <IsEnabled>true</IsEnabled>
       <FederatedAuthenticatorConfigs>
         <FederatedAuthenticatorConfig>
            <Name>SAMLSSOAuthenticator</Name>
            <IsEnabled>true</IsEnabled>
          </FederatedAuthenticatorConfig>
       </FederatedAuthenticatorConfigs>
       <DefaultAuthenticatorConfig>SAMLSSOAuthenticator</DefaultAuthenticatorConfig>
     </IdentityProvider>
</FederatedIdentityProviders>