OpenAM 15.x IDP Initiated Flow via Rest API #825
Answered
by
maximthomas
neel-quantasis
asked this question in
Q&A
-
|
I've setup OpenAM v15.x using steps mentioned here Current Implemented flow
I want to implement the above flow without opening IdP initiated flow on the browser |
Beta Was this translation helpful? Give feedback.
Answered by
maximthomas
Dec 13, 2024
Replies: 1 comment 9 replies
-
|
Try this curl -v 'http://idp.acme.org:8080/openam/idpssoinit?metaAlias=/idp&spEntityID=http%3A//sp.mycompany.org%3A8081/openam&RelayState=http%3A//sp.mycompany.org%3A8081/openam&redirected=true' \
-H 'Cookie: iPlanetDirectoryPro=<OpenAM IDP User Session Id>' and then call the |
Beta Was this translation helpful? Give feedback.
9 replies
-
|
I'm performing the same steps curl --location --request POST 'http://idp.convertcurrency.online:8080/openam/json/realms/root/authenticate' \
--header 'Content-Type: application/json' \
--header 'X-OpenAM-Username: neel.bhadra' \
--header 'X-OpenAM-Password: Neel@123' \
--header 'Accept-API-Version: resource=2.0, protocol=1.0'
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 163 100 163 0 0 324 0 --:--:-- --:--:-- --:--:-- 327
{"tokenId":"AQIC5wM2LY4Sfcxw4BvihP3A4O0_uYbQC2Pk3CEsKSqwX4s.*AAJTSQACMDEAAlNLABQtNDY1MjA3MTQ0Njc3NDIyODg4NgACUzEAAA..*","successUrl":"/openam/console","realm":"/"}curl -v 'http://idp.convertcurrency.online:8080/openam/idpssoinit?metaAlias=%2Fidp&spEntityID=urn%3Aamazon%3Acognito%3Asp%3Aus-east-1_wq2nnfJxr&RelayState=http%3A%2F%2Fsp.mycompany.org%3A8081%2Fopenam&redirected=true' \
-H 'Cookie: iPlanetDirectoryPro="AQIC5wM2LY4Sfcxw4BvihP3A4O0_uYbQC2Pk3CEsKSqwX4s.*AAJTSQACMDEAAlNLABQtNDY1MjA3MTQ0Njc3NDIyODg4NgACUzEAAA..*'
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* Host idp.convertcurrency.online:8080 was resolved.
* IPv6: (none)
* IPv4: 3.146.202.122
* Trying 3.146.202.122:8080...
* Connected to idp.convertcurrency.online (3.146.202.122) port 8080
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0
<html>
<head>
<title>Access rights validated</title>
</head>
<body onload="document.forms[0].submit()">
<form method="post" action="https://ipi-intg-gatekeeper-prod.mwbsys.com/api/v1/sso/saml/acs/a4f5db39dc3e1287fececc1ed4b75da9">
<input type="hidden" name="SAMLResponse" value="PHNhbWxwOlJlc3BvbnNlIHhtbG5zOnNhbWxwPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6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> GET /openam/idpssoinit?metaAlias=%2Fidp&spEntityID=urn%3Aamazon%3Acognito%3Asp%3Aus-east-1_wq2nnfJxr&RelayState=http%3A%2F%2Fsp.mycompany.org%3A8081%2Fopenam&redirected=true HTTP/1.1
> Host: idp.convertcurrency.online:8080
> User-Agent: curl/8.9.0
> Accept: */*
> Cookie: iPlanetDirectoryPro="AQIC5wM2LY4Sfcxw4BvihP3A4O0_uYbQC2Pk3CEsKSqwX4s.*AAJTSQACMDEAAlNLABQtNDY1MjA3MTQ0Njc3NDIyODg4NgACUzEAAA..*
>
* Request completely sent off
< HTTP/1.1 200
< X-Frame-Options: SAMEORIGIN
< Set-Cookie: JSESSIONID=65ABD2D52C682013D9ABDED2BF06F3F7; Path=/openam; HttpOnly
< Pragma: no-cache
< Cache-Control: no-cache,no-store
< Content-Type: text/html;charset=UTF-8
< Transfer-Encoding: chunked
< Date: Fri, 13 Dec 2024 08:09:53 GMT
<
{ [8622 bytes data]
100 8602 0 8602 0 0 17053 0 --:--:-- --:--:-- --:--:-- 171012FtbDpBdHRyaWJ1dGVWYWx1ZT48L3NhbWw6QXR0cmlidXRlPjwvc2FtbDpBdHRyaWJ1dGVTdGF0
ZW1lbnQ+PC9zYW1sOkFzc2VydGlvbj48L3NhbWxwOlJlc3BvbnNlPg==" />
<input type="hidden" name="RelayState" value="http://sp.mycompany.org:8081/openam" />
<noscript>
<input type="submit" value="Submit SAMLResponse data " />
</noscript>
</form>
</body>
</html>
* Connection #0 to host idp.convertcurrency.online left intactUnable to find Location header in response |
Beta Was this translation helpful? Give feedback.
-
|
Then I guess you should post your form data to the form's action location. But I strongly recommed use a browser for federation instead of using API |
Beta Was this translation helpful? Give feedback.
-
|
I tried doing that. When I send the relay state in the form, I'm getting the following error as mentioned above If I remove the relay state in the form, I'm getting redirected back to OpenAM Login page |
Beta Was this translation helpful? Give feedback.
-
|
If it is necessary, for you to use API, you can capture a har log in your browser, and then reproduce the flow with an API client. But, as I said before, I strongly recommend using a browser for federation instead of using API |
Beta Was this translation helpful? Give feedback.
Answer selected by
maximthomas
-
|
I need to be able to skip opening OpenAM on my browser for my use case Is there no way to accomplish this? |
Beta Was this translation helpful? Give feedback.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
If it is necessary, for you to use API, you can capture a har log in your browser, and then reproduce the flow with an API client.
But, as I said before, I strongly recommend using a browser for federation instead of using API