In order to enable IdP and SP extensions, deployments only need now to declare a dependency as follows:
{code:xml}
<jboss-deployment-structure>
<deployment>
<dependencies>
<!-- You need to declare this module as a dependency in order to enable PicketLink to your deployment. -->
<module name="org.picketlink" services="import" />
</dependencies>
</deployment>
</jboss-deployment-structure>
{code}
If a deployment declares this dependency, SAML authenticators would be automatically installed based on the existence of a {{picketlink.xml}}.
The resulting configuration is now similar to EAP 6 and even more simple, since there is no need to provide additional configuration in jboss-web.xml in order to install SAML authenticators . In EAP 6, you still need to define a valve there.
This change impacts only how deployments configure PicketLink extensions SAML authenticators . They still need to change {{jboss-web.xml}} (eg.: security-domain) and provide a {{picketlink.xml}} file with the {{ PicketLinkIDP}} or {{ PicketLinkSP}} configuration.
|
