Update OpenAM integration to support OpenAM 13

• Type: Story
• Status: Closed
• Priority: Minor
• Resolution: Completed
• Affects Version/s: None
• Fix Version/s: 7.0.0 DXP FP80, 7.0.10.11 DXP SP11, 7.1.10 DXP FP3, 7.1.1 CE GA2, 7.1.10.1 SP1, 7.2.0 GA1
• Component/s: Application Security, Application Security > Open SSO
• Labels:
  • QA-AUTOMATION
  • SME-should-7.2
  • ee-ts
  • fc_18_11
  • liferay-dxp-70-sp11
  • liferay-dxp-71-sp1
  • liferay-fixpack-de-80-7010
  • liferay-fixpack-dxp-3-7110
  • security-nov18
• Branch Version/s:
  7.1.x, 7.0.x
• Backported to Branch:
  Committed
• Epic/Theme:
  • Authentication
• Epic Link: Support OpenAM 13
• Sprint: AS | Iteration 1, AS | Iteration 2, AS | Iteration 3, AS | Iteration 4, AS | Iteration 5, AS | Iteration 6
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal/pull/63350
• QA Test Name:
  • LocalFile.Login#ViewInstanceSettingsAuthentication
• QA Test Score: 3

Changes to apply as solution:

• Add a version selector on OpenSSO configuration settings
• Add a ServiceTracker logic to get the correct implementation selected by user
• Implement a service request to the new OpenAM 13 endpoint that validates the authentication (json/sessions/TOKEN_ID?_action=validate, "application/json" type)

---

Steps to configure and test OpenAM 12:

1. Download OpenAM 12
2. Copy WAR file to the portal tomcat/webapps and wait for deployment
3. Go to http://localhost:8080/OpenAM-12.0.0/ and finish installation/create configuration
   1. Sign in and create user account
   2. Go to Access Control -> Top Level Realm -> Subjects -> New
   3. Fill everything and edit the created user to set an email
   4. Go back and click on Configuration
   5. Select Servers and Sites and enter in localhost server
   6. Go to Security, in the Cookie section, select the "Yes" checkbox beside "Encode Cookie Value"
   7. Sign out of OpenAM
4. Sign in to Liferay
5. Go to Instance Settings -> Authentication -> OpenSSO and select OpenAM 12 on version field
   • Set login URL: http://localhost:8080/OpenAM-12.0.0/UI/Login?goto=http://localhost:8080/c/portal/login
   • Set logout URL: http://localhost:8080/OpenAM-12.0.0/UI/Logout?goto=http://localhost:8080/web/guest/home
   • Set service URL: http://localhost:8080/OpenAM-12.0.0
   • Set "cn" as "First Name Attribute"
   • Save
6. Enable OpenSSO and Save
7. Sign out or use another browser / incognito mode
8. Go to http://localhost:8080/c/portal/login
9. Sign to OpenAM as the created user/password

 

Steps to configure and test OpenAM 13:

1. Download OpenAM 13
2. Copy WAR file to the portal tomcat/webapps and wait for deployment
3. Go to http://localhost:8080/OpenAM-13.0.0/ and finish installation/create configuration
   1. Sign in and create user account
   2. Go to Top Level Realm -> Subjects -> New
   3. Fill everything and edit the created user to set an email
   4. Go back to OpenAM Console
   5. Click on Configuration (top of the page)
   6. Go to Server and Sites
   7. Go to Security, in the Cookie section, select the "Yes" checkbox beside "Encode Cookie Value"
   8. Sign out of OpenAM
4. Sign in to Liferay
5. Go to Instance Settings -> Authentication -> OpenSSO and select OpenAM 12 on version field
   • Set login URL: http://localhost:8080/OpenAM-13.0.0/UI/Login?goto=http://localhost:8080/c/portal/login
   • Set logout URL: http://localhost:8080/OpenAM-13.0.0/UI/Logout?goto=http://localhost:8080/web/guest/home
   • Set service URL: http://localhost:8080/OpenAM-13.0.0
   • Set "cn" as "First Name Attribute"
   • Save
6. Enable OpenSSO and Save
7. Sign out or use another browser / incognito mode
8. Go to http://localhost:8080/c/portal/login
9. Sign to OpenAM as the created user/password