Testing Identity Server's Passive STS

This topic lists out the steps required to configure and execute testing of Identity Server's Passive STS. 

Prerequisites 

• WSO2 Identity Server 5.0.0 with Service Pack 1 installed - This can be downloaded from the WSO2 Identity Server product page and installed by following the instructions in the Installing the Product topic.
• Apache Tomcat 6 - To deploy the sample web application.
• PassiveSTSSample - This can be found in the SVN repository.

Configuring the sample

1. Create a folder in your local machine and navigate to it using your command line.

2. Download the Java sample by entering the following.The location of this folder will be referred to as <SAMPLE_HOME> from this point onwards.

    

   svn co http://svn.wso2.org/repos/wso2/carbon/platform/branches/turing/products/is/5.0.0/modules/samples/passive-sts/

Do the following configuration changes to the  <SAMPLE_HOME>/src/main/webapp/WEB-INF/web.xml  file.

1. Specify  idpUrl  as the URL of Identity Server's Passive STS. The following is an example. 

   <init-param>
               <param-name>idpUrl</param-name>
   			<param-value>https://localhost:9443/passivests</param-value>
   </init-param> 

2. Specify the replyURL as the URL of the web app. The following specifies PassiveSTSSampleApp as the web app.

   <init-param>
   			<param-name>replyUrl</param-name>
   			<param-value>http://localhost:8080/PassiveSTSSampleApp/index.jsp</param-value>
   </init-param>

   
   

3. Specify the  realm . This should be a unique identifier for the web app as seen in the example below. 

   <init-param>
   			<param-name>realm</param-name>
   			<param-value>PassiveSTSSampleApp</param-value>
   </init-param> 

Configuring Identity Server

1. Log in to the Identity Server and go to Service Providers>Add in the Main menu in the management console. 
2. Enter a unique name for the service provider and click Register. The following form appears. 
   
   

   

3. Expand the Inbound Authentication Configuration> WS-Federation (Passive) Configuration section and provide the following values. See  Configuring WS-Federation (Passive) or OpenID for more information.
   
   
   • Passive STS Realm - Provide the same realm name given to the web app
   • Passive STS WReply URL - Provide the URL of the web app
4. Click update. 

Deploying the sample on Apache Tomcat

1. Download Apache Tomcat and extract the .zip file into your directory, if you have not already done so.

2. Build the sample's .war file by navigating inside the <SAMPLE_HOME> directory where the pom.xml file is located and running the following command 

   mvn clean install

3. Copy the PassiveSTSSampleApp.war file located in the <SAMPLE_HOME>/target directory and paste a copy of it in the <Tomcat_Home>/webapps directory. 
4. Navigate inside the [Tomcat_Home/bin] directory in the command line and run sh catalina.sh run command to start the server.
5. On your browser, access the following link: http://localhost:8080/PassiveSTSSampleApp/index.jsp  
6. Enter user credentials and you will be redirected to the IS Passive STS Service.