Deployment Example: SAML v2 Using Sun OpenSSO Enterprise 8.0

ProcedureTo Create a Site on OpenSSO Enterprise 1

It is not necessary to repeat this procedure on OpenSSO Enterprise 2.

  1. Access https://osso1.sp-example.com:1081/opensso/console in a web browser.

  2. Log in to the OpenSSO Enterprise console as the administrator.

    Username

    amadmin

    Password

    ossoadmin

  3. Under the Configuration tab, click Servers and Sites.

    The Servers and Sites page is displayed.

  4. Click New under Sites.

    The New Site properties page is displayed.

  5. Enter the following values for the load balancer and click OK.

    Name

    sp-site

    Primary URL

    https://lb2.sp-example.com:1081/opensso

    A new site called sp-site is displayed in the Sites list.

  6. Click on the https://osso1.sp-example.com:1081/opensso server entry under the Servers list.

    The Edit https://osso1.sp-example.com:1081/opensso page is displayed.

  7. Assign sp-site from the Parent Site drop down list and click Save.

  8. Click the Advanced tab.

  9. Enter the number generated for the osso1.sp-example.com host machine as the value of the com.iplanet.am.lbcookie.value property and click Save.

    The number was generated using the makecookie command in To Configure OpenSSO Enterprise Load Balancer 2.

  10. Click Back to Server and Sites.

  11. Click on the https://osso2.sp-example.com:1081/opensso server entry under the Servers list.

    The Edit https://osso2.sp-example.com:1081/opensso page is displayed.

  12. Assign sp-site from the Parent Site drop down list and click Save.

  13. Click the Advanced tab.

  14. Enter the number generated for the osso2.sp-example.com host machine as the value of the com.iplanet.am.lbcookie.value property and click Save.

    The number was generated using the makecookie command in To Configure OpenSSO Enterprise Load Balancer 2.

  15. Click Back to Server and Sites.


    Note –

    You should see sp-site under the Site Name column for both servers.


  16. Log out of the OpenSSO Enterprise console.

  17. As a root user, log in to the osso1.sp-example.com host machine.

  18. Restart OpenSSO Enterprise for the changes to take effect.


    # /bin/su osso80adm
    # cd /export/osso80adm/domains/ossodomain/bin
    # ./stopserv; ./startserv
    
    Server was successfully stopped.
    
    admin username:  domain2adm
    
    admin password:  domain2pwd
    
    master password: domain2master
    
    Redirecting output to /export/osso80adm/domains/ossodomain/logs/server.log
  19. As a root user, log in to the osso2.sp-example.com host machine.

  20. Restart the web container for the changes to take effect.


    # /bin/su osso80adm
    # cd /export/osso80adm/domains/ossodomain/bin
    # ./stopserv; ./startserv
    
    Server was successfully stopped.
    
    admin username:  domain2adm
    
    admin password:  domain2pwd
    
    master password: domain2master
    
    Redirecting output to /export/osso80adm/domains/ossodomain/logs/server.log
  21. Log out of both OpenSSO Enterprise host machines.