OpenAM 15.x IDP Initiated Flow via Rest API #825
Answered
by
maximthomas
neel-quantasis
asked this question in
Q&A
-
|
I've setup OpenAM v15.x using steps mentioned here Current Implemented flow
I want to implement the above flow without opening IdP initiated flow on the browser |
Beta Was this translation helpful? Give feedback.
Answered by
maximthomas
Dec 13, 2024
Replies: 1 comment 9 replies
-
|
Try this curl -v 'http://idp.acme.org:8080/openam/idpssoinit?metaAlias=/idp&spEntityID=http%3A//sp.mycompany.org%3A8081/openam&RelayState=http%3A//sp.mycompany.org%3A8081/openam&redirected=true' \
-H 'Cookie: iPlanetDirectoryPro=<OpenAM IDP User Session Id>' and then call the |
Beta Was this translation helpful? Give feedback.
9 replies
-
|
I'm performing the same steps curl --location --request POST 'http://idp.convertcurrency.online:8080/openam/json/realms/root/authenticate' \
--header 'Content-Type: application/json' \
--header 'X-OpenAM-Username: neel.bhadra' \
--header 'X-OpenAM-Password: Neel@123' \
--header 'Accept-API-Version: resource=2.0, protocol=1.0'
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 163 100 163 0 0 324 0 --:--:-- --:--:-- --:--:-- 327
{"tokenId":"AQIC5wM2LY4Sfcxw4BvihP3A4O0_uYbQC2Pk3CEsKSqwX4s.*AAJTSQACMDEAAlNLABQtNDY1MjA3MTQ0Njc3NDIyODg4NgACUzEAAA..*","successUrl":"/openam/console","realm":"/"}curl -v 'http://idp.convertcurrency.online:8080/openam/idpssoinit?metaAlias=%2Fidp&spEntityID=urn%3Aamazon%3Acognito%3Asp%3Aus-east-1_wq2nnfJxr&RelayState=http%3A%2F%2Fsp.mycompany.org%3A8081%2Fopenam&redirected=true' \
-H 'Cookie: iPlanetDirectoryPro="AQIC5wM2LY4Sfcxw4BvihP3A4O0_uYbQC2Pk3CEsKSqwX4s.*AAJTSQACMDEAAlNLABQtNDY1MjA3MTQ0Njc3NDIyODg4NgACUzEAAA..*'
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* Host idp.convertcurrency.online:8080 was resolved.
* IPv6: (none)
* IPv4: 3.146.202.122
* Trying 3.146.202.122:8080...
* Connected to idp.convertcurrency.online (3.146.202.122) port 8080
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0
<html>
<head>
<title>Access rights validated</title>
</head>
<body onload="document.forms[0].submit()">
<form method="post" action="https://ipi-intg-gatekeeper-prod.mwbsys.com/api/v1/sso/saml/acs/a4f5db39dc3e1287fececc1ed4b75da9">
<input type="hidden" name="SAMLResponse" value="PHNhbWxwOlJlc3BvbnNlIHhtbG5zOnNhbWxwPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6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> GET /openam/idpssoinit?metaAlias=%2Fidp&spEntityID=urn%3Aamazon%3Acognito%3Asp%3Aus-east-1_wq2nnfJxr&RelayState=http%3A%2F%2Fsp.mycompany.org%3A8081%2Fopenam&redirected=true HTTP/1.1
> Host: idp.convertcurrency.online:8080
> User-Agent: curl/8.9.0
> Accept: */*
> Cookie: iPlanetDirectoryPro="AQIC5wM2LY4Sfcxw4BvihP3A4O0_uYbQC2Pk3CEsKSqwX4s.*AAJTSQACMDEAAlNLABQtNDY1MjA3MTQ0Njc3NDIyODg4NgACUzEAAA..*
>
* Request completely sent off
< HTTP/1.1 200
< X-Frame-Options: SAMEORIGIN
< Set-Cookie: JSESSIONID=65ABD2D52C682013D9ABDED2BF06F3F7; Path=/openam; HttpOnly
< Pragma: no-cache
< Cache-Control: no-cache,no-store
< Content-Type: text/html;charset=UTF-8
< Transfer-Encoding: chunked
< Date: Fri, 13 Dec 2024 08:09:53 GMT
<
{ [8622 bytes data]
100 8602 0 8602 0 0 17053 0 --:--:-- --:--:-- --:--:-- 171012FtbDpBdHRyaWJ1dGVWYWx1ZT48L3NhbWw6QXR0cmlidXRlPjwvc2FtbDpBdHRyaWJ1dGVTdGF0
ZW1lbnQ+PC9zYW1sOkFzc2VydGlvbj48L3NhbWxwOlJlc3BvbnNlPg==" />
<input type="hidden" name="RelayState" value="http://sp.mycompany.org:8081/openam" />
<noscript>
<input type="submit" value="Submit SAMLResponse data " />
</noscript>
</form>
</body>
</html>
* Connection #0 to host idp.convertcurrency.online left intactUnable to find Location header in response |
Beta Was this translation helpful? Give feedback.
-
|
Then I guess you should post your form data to the form's action location. But I strongly recommed use a browser for federation instead of using API |
Beta Was this translation helpful? Give feedback.
-
|
I tried doing that. When I send the relay state in the form, I'm getting the following error as mentioned above If I remove the relay state in the form, I'm getting redirected back to OpenAM Login page |
Beta Was this translation helpful? Give feedback.
-
|
If it is necessary, for you to use API, you can capture a har log in your browser, and then reproduce the flow with an API client. But, as I said before, I strongly recommend using a browser for federation instead of using API |
Beta Was this translation helpful? Give feedback.
Answer selected by
maximthomas
-
|
I need to be able to skip opening OpenAM on my browser for my use case Is there no way to accomplish this? |
Beta Was this translation helpful? Give feedback.
# for free
to join this conversation on GitHub.
Already have an account?
# to comment
If it is necessary, for you to use API, you can capture a har log in your browser, and then reproduce the flow with an API client.
But, as I said before, I strongly recommend using a browser for federation instead of using API