Cross domain single sign on using SAML 2.0 between Service Provider on Weblogic and OpenAM (OpenSSO)

I searched the Internet for articles relating to Single Sign on between OpenAM and a remote service provider hosted on Weblogic 11g. The inspiration and ideas for troubleshooting came from http://www.oracleimg.com/technetwork/articles/entarch/sso-with-saml-099684.html and another site that will add later here.

I’m not providing any information about what SAML or what cross domain single sign on is. I’m also not providing information about how Weblogic is installed or how OpenAM (OpenSSO) is installed and configured.

Configuring OpenAM (interchangeably used with OpenSSO)

Step 1: Login into OpenAM with the amadmin id

Step 2: Click on “Create Hosted Identity Provider”

Step 3: Specify the name as Hosted IDP, the default signing key test, a new circle of trust called OpenSSO COT. Click on Configure and then Finish. The new Circle of Trust and Identity provider will be listed in the Federation tab

Step 4: Click on Hosted IDP within the Entity Providers section

Step 5: Within the Name ID format list specify the values as shown in the following image

 Step  6: Click on Save and go to the Assertion Processing tab. Fill in the values as shown in the image below.

Step 7: Click on Save. Then visit the following link for the ssoadm page

http://:/opensso/ssoadm.jsp

Step 8: Click on the export-entity link and specify the following values.

 Step 9: Click on Submit. Copy and paste the exported XML into a file on the filesystem. I called my Hosted_IDP.xml file

More steps to continue….