docs
This commit is contained in:
parent
a068d83dd8
commit
34095ef522
5 changed files with 48 additions and 0 deletions
|
@ -112,6 +112,14 @@
|
|||
check adapter config switches.
|
||||
</para>
|
||||
</simplesect>
|
||||
<simplesect>
|
||||
<title>SAML SP Client Adapter Changes</title>
|
||||
<para>
|
||||
Keycloak SAML SP Client Adapter now requires a specific endpoint, <literal>/saml</literal> to be
|
||||
registered with your IDP.
|
||||
</para>
|
||||
</simplesect>
|
||||
|
||||
</section>
|
||||
<section>
|
||||
<title>Migrating to 1.8.0</title>
|
||||
|
|
|
@ -12,6 +12,8 @@
|
|||
<!ENTITY Logout SYSTEM "modules/logout.xml">
|
||||
<!ENTITY ErrorHandling SYSTEM "modules/adapter_error_handling.xml">
|
||||
<!ENTITY DEBUGGING SYSTEM "modules/debugging.xml">
|
||||
<!ENTITY Migrating SYSTEM "modules/MigrationFromOlderVersions.xml">
|
||||
<!ENTITY IDP_REG SYSTEM "modules/idp-registration.xml">
|
||||
]>
|
||||
|
||||
<book>
|
||||
|
@ -51,10 +53,12 @@ This one is short
|
|||
&Jetty9Adapter;
|
||||
&Jetty8Adapter;
|
||||
&FilterAdapter;
|
||||
&IDP_REG;
|
||||
&Logout;
|
||||
&Assertions;
|
||||
&ErrorHandling;
|
||||
&DEBUGGING;
|
||||
&Migrating;
|
||||
|
||||
|
||||
|
||||
|
|
|
@ -0,0 +1,21 @@
|
|||
<chapter id="Migration_from_older_versions">
|
||||
<title>Migration from older versions</title>
|
||||
|
||||
<section>
|
||||
<title>Version specific migration</title>
|
||||
<section>
|
||||
<title>Migrating to 1.9.0</title>
|
||||
<simplesect>
|
||||
<title>SAML SP Client Adapter Changes</title>
|
||||
<para>
|
||||
Keycloak SAML SP Client Adapter now requires a specific endpoint, <literal>/saml</literal> to be
|
||||
registered with your IDP. The SamlFilter must also be bound to /saml in addition to any other binding it has.
|
||||
This had to be done because SAML POST binding would eat the request input stream and this would be really
|
||||
bad for clients that relied on it.
|
||||
</para>
|
||||
</simplesect>
|
||||
|
||||
</section>
|
||||
|
||||
</section>
|
||||
</chapter>
|
|
@ -0,0 +1,7 @@
|
|||
<chapter id="idp-reg">
|
||||
<title>Registering with an IDP</title>
|
||||
<para>
|
||||
For each servlet based adapter, the endpoint you register for the assert consumer service url and and single logout service
|
||||
must be the base url of your servlet application with <literal>/saml</literal> appended to it i.e. https://example.com/contextPath/saml
|
||||
</para>
|
||||
</chapter>
|
|
@ -42,6 +42,14 @@
|
|||
The Keycloak filter has the same configuration parameters available as the other adapters except you must define
|
||||
them as filter init params instead of context params.
|
||||
</para>
|
||||
<para>
|
||||
You can define multiple filter mappings if you have various different secure and unsecure url patterns.
|
||||
</para>
|
||||
<warning>
|
||||
<para>
|
||||
You must have a filter mapping for <literal>/saml</literal>
|
||||
</para>
|
||||
</warning>
|
||||
<para>
|
||||
To use this filter, include this maven artifact in your WAR poms
|
||||
</para>
|
||||
|
|
Loading…
Reference in a new issue