Testing Passive STS

This topic lists out the steps required to configure and execute testing of Identity Server's Passive STS. 

Prerequisites 

• WSO2 Identity Server - This can be downloaded from the WSO2 Identity Server product page and installed by following the instructions in the Installing the Product topic.

• Apache Tomcat 6/7 - To deploy the sample web application. This can be downloaded from the Apache Tomcat website. 

• Passive STS Sample - This can be downloaded from the GitHub repository by following the instructions in the Downloading a Sample topic.

Configuring the sample

Do the following configuration changes to the <SAMPLE_HOME>/passive-sts/passive-sts-client/PassiveSTSSampleApp/src/main/webapp/WEB-INF/web.xml file.

1. Specify idpUrl as the URL of Identity Server's Passive STS. The following is an example. 

   <init-param> <param-name>idpUrl</param-name> <param-value>https://localhost:9443/passivests</param-value> </init-param> 

2. Specify the replyURL as the URL of the web app. The following specifies PassiveSTSSampleApp as the web app.

   <init-param> <param-name>replyUrl</param-name> <param-value>http://localhost:8080/PassiveSTSSampleApp/index.jsp</param-value> </init-param>

3. Specify the realm. This should be a unique identifier for the web app as seen in the example below. 

   <init-param> <param-name>realm</param-name> <param-value>PassiveSTSSampleApp</param-value> </init-param>

4. For tenant user logins, specify the tenantDomain. 

   <init-param> <param-name>requestParams</param-name> <param-value>tenantDomain=tenant4.com</param-value> </init-param>

Configuring Identity Server

1. Log in to the Identity Server and go to Service Providers>Add in the Main menu in the management console. 

2. Enter a unique name for the service provider and click Register. The following form appears. 

   Open

   

3. Expand the Inbound Authentication Configuration>WS-Federation (Passive) Configuration section and provide the following values. See Configuring WS-Federation (Passive) for more information.
   
   

   • Passive STS Realm - Provide the same realm name given to the web app

   • Passive STS WReply URL - Provide the URL of the web app

4. Click update. 

Deploying the sample on Apache Tomcat