{"id":11525,"date":"2025-04-22T15:17:40","date_gmt":"2025-04-22T20:17:40","guid":{"rendered":"https:\/\/www.rushworth.us\/lisa\/?p=11525"},"modified":"2025-04-22T15:17:40","modified_gmt":"2025-04-22T20:17:40","slug":"authenticating-weblogic-admin-console-with-saml-2-0-and-pingid","status":"publish","type":"post","link":"https:\/\/www.rushworth.us\/lisa\/?p=11525","title":{"rendered":"Authenticating WebLogic Admin Console with SAML 2.0 and PingID"},"content":{"rendered":"

Log into your console. Navigate to \u201cSecurity Realms\u201d and click on your admin console\u2019s realm \u2013 here \u201cmyrealm\u201d<\/p>\n

\"A<\/p>\n

From the first row of tabs, select \u201cProviders\u201d. On the second row of tabs, ensure you are on \u201cAuthentication\u201d. Click \u201cNew\u201d to create a new identity asserter.<\/p>\n

\"A<\/p>\n

Provide a name \u2013 here, it is called SAML_IA \u2013 and ensure the type is \u201cSAML2IdentityAsserter\u201d<\/p>\n

\"A<\/p>\n

Click OK to create the item. Then click the \u201cNew\u201d button again to create a new SAML Authenticator<\/p>\n

\"A<\/p>\n

Restart the WebLogic server, then navigate to \u201cEnvironment\u201d => \u201cServers\u201d and select the AdminServer<\/p>\n

\"A<\/p>\n

On the first row of tabs, select \u201cConfiguration\u201d, on the second row of tabs, select \u201cFederation Servies\u201d, and on the third row of tabs select \u201cSAML 2.0 General\u201d<\/p>\n

<\/p>\n

The published site URL will be your WebLogic host base followed by \/saml2<\/p>\n

Provide a unique entity ID that needs to match up with what we configure in PingID. Here, I used \u201cLJRWebLogic\u201d<\/p>\n

\"A<\/p>\n

Save the changes and then use the \u201cPublish Metadata\u201d button to save a metadata file that I will use with PingID. You will be saving an XML file<\/p>\n

\"A<\/p>\n

Now select the \u201cSAML 2.0 Service Provider\u201d tab on the third row of tabs. Click \u201cEnabled\u201d to enable the service provider. POST binding should be enabled, but we do not need Artifact binding enabled. Click \u201cSave\u201d to save the changes.<\/p>\n

\"A<\/p>\n

Navigate back to \u201cSecurity Realms\u201d and select your realm. On the first row of tabs, select \u201cProviders\u201d; on the second row of tabs, select \u201cAuthentication\u201d. Click the hyperlink for \u201cSAML_IA\u201d<\/p>\n

\"A<\/p>\n

Click the \u201cManagement\u201d tab<\/p>\n

\"A<\/p>\n

You will be provided a metadata file from PingID. Place that somewhere on your server (I used \/tmp). Click \u201cNew\u201d and then select \u201cNew Web Single Sign-On Identity Provider Partner\u201d<\/p>\n

\"A<\/p>\n

Navigate to the metadata file and select it. Provide a name for the identity provider \u2013 here, I used PingID. Cilck \u201cOK\u201d to import the PingID details.<\/p>\n

\"A<\/p>\n

Click on the new entry to configure it<\/p>\n

\"A<\/p>\n

Click \u201cEnabled\u201d to enable the Identity Provider. The redirect URIs should be \/console\/*<\/p>\n

\"A<\/p>\n

Finally, on the WebLogic Server Admin Console, navigate to the domain name -> [Configuration] -> [General] and expand the [Advanced] link<\/p>\n

Update cookie name in WLS admin console to be JSESSIONID.<\/p>\n

\"A<\/p>\n

Save the changes and restart the WebLogic server. Navigating to the console, here https:\/\/docker.rushworth.us:7001\/console<\/a>, will direct the user to PingID for authentication and then redirect the user\u2019s browser back to the WebLogic server. Looking in the upper right corner of the screen, they will see they are logged in with their directory ID.<\/p>\n

\"A<\/p>\n

Note: You can still access the local authentication dialog by navigating directly to console\/login\/LoginForm.jsp \u2013 e.g. http:\/\/docker.rushworth.us:7001\/console\/login\/LoginForm.jsp<\/a> — but the \u201cnormal\u201d URL will redirect users to PingID<\/p>\n

Note Also: There needs to be some step here to map PingID users to a role in WebLogic<\/p>\n

Failing to do so, you will complete the PingID authentication but be denied access to the WebLogic Admin Console:<\/p>\n

\"A<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

Log into your console. Navigate to \u201cSecurity Realms\u201d and click on your admin console\u2019s realm \u2013 here \u201cmyrealm\u201d From the first row of tabs, select \u201cProviders\u201d. On the second row of tabs, ensure you are on \u201cAuthentication\u201d. Click \u201cNew\u201d to create a new identity asserter. Provide a name \u2013 here, it is called SAML_IA \u2013 …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2101],"tags":[2103,1701,523,2102],"class_list":["post-11525","post","type-post","status-publish","format-standard","hentry","category-weblogic","tag-oracle-weblogic","tag-saml","tag-weblogic","tag-wls"],"_links":{"self":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts\/11525","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=11525"}],"version-history":[{"count":1,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts\/11525\/revisions"}],"predecessor-version":[{"id":11544,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts\/11525\/revisions\/11544"}],"wp:attachment":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11525"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11525"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11525"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}