|
1 | | -# WS-Federation settings for apps |
2 | | - |
3 | | -You can find the WS-Federation protocol related settings under **Protocol** section of the selected WS-Federation application. |
4 | | - |
5 | | -{: width="600" style="display: block; margin: 0; border: 0.3px solid lightgrey;"} |
6 | | - |
7 | | -## Basic settings |
8 | | - |
9 | | -To enable WS-Federation-based single sign-on (SSO), you need to configure the following key identifiers and endpoints. |
10 | | - |
11 | | -### Realm |
12 | | - |
13 | | -The Realm is a unique identifier for your application. It tells {{product_name}} which application is requesting authentication. This must match the `wtrealm` parameter in the WS-Federation request. |
14 | | - |
15 | | -### Reply URL |
16 | | - |
17 | | -The Reply URL is the endpoint in your application where {{product_name}} sends the authentication response after a successful login. This should match the `wreply` parameter in the WS-Federation request and must be configured to handle the security token. |
18 | | - |
19 | | -### Reply Logout URL |
20 | | - |
21 | | -The Reply Logout URL is the endpoint in your application that receives the logout response from {{product_name}}. |
22 | | - |
23 | | -## Advanced settings |
24 | | - |
25 | | -Use the following advanced settings to enhance the security and behavior of your WS-Federation integration. |
26 | | - |
27 | | -### Certificate |
28 | | - |
29 | | -If your application signs authentication or logout requests, {{product_name}} uses this certificate to verify their authenticity. |
30 | | - |
31 | | -You can either upload a certificate or use a JWKS endpoint to add a certificate. |
32 | | - |
33 | | -To upload a certificate: |
34 | | - |
35 | | -1. Select <b>Provide Certificate</b> and click <b>New Certificate</b>. |
36 | | - |
37 | | - {: width="400" style="display: block; margin: 0; border: 0.3px solid lightgrey;"} |
38 | | - |
39 | | - ??? note "Convert `.crt`, `.cer` or `.der` certificates to `.pen` using [OpenSSL](https://www.openssl.org/){:target="_blank"}" |
40 | | - |
41 | | - {{product_name}} only accepts certificates in the `.pem` format. To convert other certificates to `pem`, use one of the following commands. |
42 | | - |
43 | | - - Convert CRT to PEM |
44 | | - |
45 | | - ``` |
46 | | - openssl x509 -in cert.crt -out cert.pem |
47 | | - ``` |
48 | | - |
49 | | - - Convert CER to PEM: |
50 | | - |
51 | | - ``` |
52 | | - openssl x509 -in cert.cer -out cert.pem |
53 | | - ``` |
54 | | - |
55 | | - - Convert DER to PEM: |
56 | | - |
57 | | - ``` |
58 | | - openssl x509 -in cert.der -out cert.pem |
59 | | - ``` |
60 | | - |
61 | | -2. Upload the certificate file or copy the certificate contents. |
| 1 | +{% set product_name = "WSO2 Identity Server" %} |
| 2 | +{% set product_url_format = "https://localhost:9443" %} |
| 3 | +{% set product_url_sample = "https://localhost:9443" %} |
| 4 | +{% set entityID = "localhost" %} |
| 5 | +{% include "../../../../../includes/references/app-settings/ws-federation-settings-for-app.md" %} |
0 commit comments