From e5934e9d541f4deb693773debd744818c7d068c9 Mon Sep 17 00:00:00 2001
From: Bill Burke <bburke@redhat.com>
Date: Tue, 28 Oct 2014 12:16:54 -0400
Subject: [PATCH] saml docs

---
 docbook/reference/en/en-US/modules/saml.xml       | 15 ++++++++++++++-
 .../tomcat7/KeycloakAuthenticatorValve.java       |  2 +-
 2 files changed, 15 insertions(+), 2 deletions(-)

diff --git a/docbook/reference/en/en-US/modules/saml.xml b/docbook/reference/en/en-US/modules/saml.xml
index 1f6a1a3724..85219073bc 100755
--- a/docbook/reference/en/en-US/modules/saml.xml
+++ b/docbook/reference/en/en-US/modules/saml.xml
@@ -88,10 +88,23 @@
             </varlistentry>
         </variablelist>
     </para>
+    <para>
+        You have to specify an admin URL if you want logout to work.  This should be a URL that will except single logout
+        requests from the Keycloak server.  You should also specify a default redirect url.  Keycloak will redirect to this
+        url after single logout is complete.
+    </para>
     <para>
         One thing to note is that roles are not treated as a hierarchy.  So, any role mappings will just be added
-        to the role attributes in the SAML document using their basic name.  So, if you have multiple applicaiton roles
+        to the role attributes in the SAML document using their basic name.  So, if you have multiple application roles
         you might have name collisions.  You can use the Scope Mapping menu item to control which role mappings are set
         in the response.
     </para>
+    <section>
+        <title>SAML Entity Descriptor Import</title>
+        <para>
+            If you go into the admin console in the application list menu page you will see an <literal>Import</literal>
+            button.  If you click on that you can import SAML Service Provider definitions using the <ulink url="http://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf">Entity Descriptor</ulink>
+            format described in SAML 2.0.  You should review all the information there to make sure everything is set up correctly.
+        </para>
+    </section>
 </chapter>
diff --git a/integration/tomcat7/adapter/src/main/java/org/keycloak/adapters/tomcat7/KeycloakAuthenticatorValve.java b/integration/tomcat7/adapter/src/main/java/org/keycloak/adapters/tomcat7/KeycloakAuthenticatorValve.java
index 0ffa42c857..73d0cc9c31 100755
--- a/integration/tomcat7/adapter/src/main/java/org/keycloak/adapters/tomcat7/KeycloakAuthenticatorValve.java
+++ b/integration/tomcat7/adapter/src/main/java/org/keycloak/adapters/tomcat7/KeycloakAuthenticatorValve.java
@@ -102,7 +102,7 @@ public class KeycloakAuthenticatorValve extends FormAuthenticator implements Lif
         }
         deploymentContext = new AdapterDeploymentContext(kd);
         context.getServletContext().setAttribute(AdapterDeploymentContext.class.getName(), deploymentContext);
-        AuthenticatedActionsValve actions = new AuthenticatedActionsValve(deploymentContext, getNext(), getContainer(), getObjectName());
+        AuthenticatedActionsValve actions = new AuthenticatedActionsValve(deploymentContext, getNext(), getContainer());
         setNext(actions);
 
         nodesRegistrationManagement = new NodesRegistrationManagement();