{"id":12066,"date":"2014-03-11T16:00:05","date_gmt":"2014-03-11T10:30:05","guid":{"rendered":"http:\/\/www.tothenew.com\/blog\/?p=12066"},"modified":"2024-01-02T17:50:07","modified_gmt":"2024-01-02T12:20:07","slug":"enabling-sso-with-cq5-part-ii","status":"publish","type":"post","link":"https:\/\/www.tothenew.com\/blog\/enabling-sso-with-cq5-part-ii\/","title":{"rendered":"Enabling SSO with CQ5 – Part II"},"content":{"rendered":"
\n

In first part<\/a>\u00a0of our tri-part blog series ,\u00a0\u00a0we discussed about the installation and configuration of Shibboleth IdP. We’ll be focusing on the following two use cases :<\/p>\n<\/div>\n

\n

Use-Case I : Protecting CQ5 author instance when CQ5 acts as a service provider (SP).<\/p>\n

Use-Case II: Protecting any published resource\/website.<\/div>\n<\/div>\n
<\/div>\n
This blogpost will target to provide the solution for the first use case and provide a way to protect CQ5 author instance.<\/div>\n
<\/div>\n
Basic Workflow:\u00a0<\/strong><\/div>\n
<\/div>\n
When user accesses a protected resource, the SP determines if the user has an active session. If there is no valid session, SP will prepare an authentication request and send that\u00a0SAML\u00a0<\/strong>authentication request to IdP. Shibboleth IdP will check for valid session on its end, if no session exists, login screen will be presented to the user to enter the login credentials. IdP will in turn request LDAP for user credentials, fetches the necessary information, generates a SAML response and send it to SP. User is now trying again to access the protected resource, but this time the user has a session and SP knows who they are. SP will service the user\u2019s request and send back the requested data.<\/div>\n
<\/div>\n
AEM provides support for the SAML 2.0 Authentication Request and can act as a SAML service provider.<\/strong><\/div>\n
<\/div>\n
<\/div>\n
\"\"<\/div>\n
<\/div>\n
<\/div>\n
Necessary Steps \u00a0:\u00a0<\/strong><\/div>\n
<\/div>\n
\n
    \n
  1. Installing LDAP Server.<\/li>\n
  2. Installing Shibboleth IdP.<\/li>\n
  3. Installing Apache tomcat on Ubuntu.<\/li>\n
  4. Configuring Shibboleth IdP.<\/li>\n
  5. Creating the SP’s metadata file (AEM in this case )\u00a0\u00a0and providing it to IdP.<\/li>\n
  6. AEM configuration.<\/li>\n
  7. Accessing AEM author instance.<\/li>\n<\/ol>\n<\/div>\n
    Steps 1-4 have already been covered in Part \u00a0I<\/a>. Subsequent steps are explained below :<\/div>\n
    <\/div>\n
    \n
      \n
    1. Creating the SP’s metadata file (AEM in this case )\u00a0<\/strong>and providing it to IdP.<\/strong><\/li>\n<\/ol>\n