Integrating with Whydah

SecurityTokenService is created to give the application an ApplicationToken and a UserToken.
The UserToken will contain the roles granted for the given user in the app.
It is where to start when you want to integrate your app.

Prerequisties:
Development environment Win or Linux with Java installed.

1. Download SecurityTokenService.jar Download
2. Download propertyfile here to same location
3. In command prompt, run java -DIAM_MODE=DEV -DIAM_CONFIG=securitytokenservice.DEV.properties -jar SecurityTokenService.jar
4. Point a browser at http://localhost:9998/tokenservice/
5. Test the operations in the GUI (test API driver)

NOTE:
In DEV mode, you can create and adjust test-data/users/usertokens by creating files in the same directory with naming convension t_<my_test_username>.token ( See Example)

Some tips on parsing the UserToken to check roles

Xpath examples (Hint: experiment here)

Typical datastructures:
ApplicationCredential, ApplicationToken, UserCredential, UserToken

Integration examples

We have provided a few integration examples for a set of different programming languages.
See links below.

• Java web-app example https://github.com/altran/Whydah-TestWebApp
• Spring Security example https://github.com/altran/Whydah-TestWebApp/tree/master/ImplementationExamples/spring-security
• Django example https://github.com/altran/Whydah-TestWebApp/tree/master/ImplementationExamples/Django
• JavaScript example https://github.com/altran/Whydah-TestWebApp/tree/master/ImplementationExamples/Javascript
• SharePoint 2013 (.NET) example https://github.com/altran/Whydah-TestWebApp/tree/master/ImplementationExamples/SharePoint

SSOLoginWebApplication is created to present a basic configurable login GUI, reset password GUI and user registration.

1. Download SSOLoginwebApp.jar Download
2. Download propertyfile here to same location.
3. Adjust properties and insert reference to a proper logo for your app/company.
4. In command prompt, run java -DIAM_MODE=TEST -DIAM_CONFIG=ssologinwebapp.TEST.properties -jar SSOLoginwebApp.jar
5. Point your browser to see the login GUI: http://localhost:9997/sso/
6. Configure your application to redirct to http://localhost:9997/sso/ if no valid UserToken is presented.
   • PS: Make this a configurable property in your app, since you might want to change it in PROD-environment

UserIdentityBackend is created to store user identities, store user roles and integrate with 3rd party IDP's.
It may run locally in DEV mode with embedded LDAP for user storage and HSSQL db for role storage.
It should be set up to provide default roles to users from different 3rd party identities.

1. Download UserIdentityBackend.jar Download
2. Download propertyfile here to same location.
3. Adjust properties if needed.
   1. If you want to import test users, create a folder called testdata, download these files and adjust them if needed. Set import.enabled=true

1. In command prompt, run java -DIAM_MODE=DEV -DIAM_CONFIG=useridentitybackend.DEV.properties -jar UserIdentityBacnend.jar
2. If you have SecurityTokenService running from point 1. above, you need to change it's mode from DEV to TEST for it to talk with UIB:
   1. Stop it by pressing CTRL+C in the command line window
   2. Copy securitytokenservice.DEV.properties to securitytokenservice.TEST.properties (Or download securitytokenservice.TEST.properties)
   3. Adjust TEST properties to point at the newly installed UIB om http://localhost:9995/uib/
   4. Start by running java -DIAM_MODE=TEST -DIAM_CONFIG=securitytokenservice.TEST.properties -jar SecurityTokenService.jar