如何在 java 或 node 中为 SAML 创建自己的 IDP

问题描述:

我想创建一个供多个应用程序使用的 SSO,最好的方法是什么.我正在浏览 SAML2.0,但我很困惑,因为我没有找到任何文章来创建自己的/自定义 SAML IDP.

I want to create a SSO to be used by multiple applications, what would be the best way to do it. I was going through SAML2.0 but I am confused as I didn’t find any articles to create own/custom SAML IDP.

1.创建自己的IDP有多可行.
2.SSO的最佳实现方式是什么

1.How feasible it is to create own IDP.
2.What is the best way to implement SSO

问题 1:创建自己的 IDP 的可行性如何?

是的,有可能,但需要付出很多努力.

Question 1: How feasible it is to create own IDP?

Yes, it is possible but requires lots of efforts.

此存储库可以帮助您弄清楚如何构建自己的 IDP:使用 OpenSAML 库的模拟 IDP 和 SP

This repository can help you figuring out how to build your own IDP: A mock IDP and SP using the OpenSAML library

此存储库可以帮助您将自己的 IDP 集成到 Spring Boot 应用程序:Spring Boot、SAML 和 Okta

This repository can help you on how to integrate your own IDP to Spring Boot application: Spring Boot, SAML, and Okta

在我看来,实现 SSO 的最佳方式是使用现收现付身份服务.它可以帮助您节省精力和金钱.Amazon、Google、Apple、Okta、Auth0、geetoPod 等有很多这样的服务.

In my oppinion, the best way to implement SSO is using pay-as-go identity service. It helps you saving efforts and money. There are many such services from Amazon, Google, Apple, Okta, Auth0, geetoPod, etc.