DOCSLIB.ORG

It Is I, SAML

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
It Is I, SAML It is I, SAML Ana Mandić Development Lead @ Five Minutes Ltd About Five Minutes • We design and develop top notch mobile apps for leading mobile platforms • 50 full-time employees • Offices in Zagreb, Osijek and New York • Privately owned, founded in 2007. • Platforms we master: SAML • SAML - Security Assertion Markup Language • SAML addresses the web browser single sign-on (SSO) problem • IdP – Identity provider • SP – Service provider • OpenID protocol The SAML Use Case OpenAM • OpenAM is an open source access management, entitlements and federation server platform History: • OpenSSO - announced by Sun Microsystems in July 2005 • In February 2010 Oracle completed their acquisition of Sun Microsystems and shortly thereafter removed OpenSSO • ForgeRock announced in February 2010 that they would continue to develop and support OpenSSO and renamed the product OpenAM Fedlet • Fedlet is a small web application that can do federation in your service provider application with OpenAM acting as the identity provider • Redirects to OpenAM for single sign on and retrieves SAML assertions • Three ways of integration with Java Web Applications Structure of Fedlet zip • conf/ - folder with configuration files which needs to be copied on your server and added to classpath • fedlet.war – saml2/jsp/ - JSPs to initiate single sign on and single logout, to handle error and for obtaining Fedlet metadata – /WEB-INF/classes/ - set of properties files – /WEB-INF/lib/ - opensso-sharedlib.jar, openfedlib.jar Fedlet integration Steps to include Fedlet inside your own application: • include content from folders: classes, lib and saml2/jsp • map saml2 servlets defined in jsps • create SAMLAssertionLandingServlet Example of web.xml <servlet> <servlet-name>SAMLAssertionLandingServlet</servlet-name> <servlet-class> eu.fiveminutes.web.servlets.Web_SAMLAssertionLandingServlet </servlet-class> </servlet> <servlet> <servlet-name>fedletSloInit</servlet-name> <jsp-file>/jsp/saml2/spSingleLogoutInit.jsp</jsp-file> </servlet> <servlet> <servlet-name>fedletlogout</servlet-name> <jsp-file>/jsp/saml2/logout.jsp</jsp-file> </servlet> … Example of SAML response <samlp:Response Version="2.0"> <samlp:Status> <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" /> </samlp:Status> <saml:Assertion> <saml:AttributeStatement> <saml:Attribute Name="id"> <saml:AttributeValue xsi:type="xs:string">123</saml:AttributeValue> </saml:Attribute> </saml:AttributeStatement> </saml:Assertion> </samlp:Response> Reading SAML response There is a single object within the Fedlet API that the Service Provider must use to consume the SAML Assertion and retrieve the attributes from it. • Class - com.sun.identity.saml2.profile.SPACSUtils • Method – java.util.Map processResponseForFedlet(HttpServletRequest request, HttpServletResponse response) • com.sun.identity.saml2.common.SAML2Constants Configuration files • FederationConfig.properties • fedlet.cot • idp.xml • idp-extended.xml • sp.xml • sp-extended.xml Spring Security – SAML Extension • The component enables both new and existing applications to act as a Service Provider in federations based on SAML 2.0 protocol and enable Web Single Sign-On. • Easy for integration with existing Spring Security in the project by adding custom SAML filter in SpringSecurityFilterChain. • SAML configuration files: – idp.xml – sp.xml Spring Security configuration • Base package org.springframework.security.saml • Beans – samlFilter - org.springframework.security.web.FilterChainProxy – samlEntryPoint - org.springframework.security.saml.SAMLEntryPoint – samlWebSSOProcessingFilter - org.springframework.security.saml.SAMLProcessingFilter Spring Security configuration – samlLogoutFilter - org.springframework.security.saml.SAMLLogoutFilter – samlLogoutProcessingFilter - org.springframework.security.saml.SAMLLogoutProcessing Filter – metadata - org.springframework.security.saml.metadata.CachingMeta dataManager – samlAuthenticationProvider - org.springframework.security.saml.SAMLAuthenticationPr ovider Spring Security configuration – processor - org.springframework.security.saml.processor.SAMLProcess orImpl – beans for bindings, encoders and decoders used for creating and parsing messages User details • Configuration for SAMLAuthenticationProvider defines bean that can be used to load user data after SSO • Custom class which implements SAMLUserDetailsService and overrides method loadUserBySAML(final SAMLCredential credential) Load Balancer • SAML Extension 1.0.0.RC2 implements SAMLContextProviderLB • Older versions use server instance name which can create a problem in SAML response validation References • OpenSSO and OpenAM http://openam.forgerock.org/openam- documentation/openam-doc-source/doc/dev- guide/index.html#chap-fedlet-java • Spring Security http://static.springsource.org/spring- security/site/extensions/saml/index.html Thank you Contact Ana Mandić gsm +385 99 5022 256 Five Minutes Ltd, Development Lead mail [email protected] skype ana.mandic twitter @tanandaaa web http://www.fiveminutes.eu .
Load more

Recommended publications
  • Hosting Requirements Smarter Balanced Assessment Consortium – Test Delivery System
    Hosting Requirements Smarter Balanced Assessment Consortium – Test Delivery System American Institutes for Research Revision History Revision Description Author/Modifier Date Initial Release David Lopez de Quintana October 14, 2013 Updated to latest Amazon Web Service instance types and David Lopez de Quintana March 30, 2014 costs Updated concurrent student numbers, RDS IOP Jeff Treuting (Fairway) May 18, 2016 recommendation and AWS instance types Updated for TDS 3.1.0 Release Jeff Johnson (Fairway) July 10, 2017 Hosting Requirements Smarter Balanced Assessment Consortium Test Delivery System Contents Purpose ......................................................................................................................................................... 4 System Overview .......................................................................................................................................... 4 Component Software ................................................................................................................................... 6 Development/Operation Software Packages 6 Software Packages by Component 7 Deployment Assumptions .......................................................................................................................... 10 Deployment Configurations ....................................................................................................................... 10 Test Delivery Unit 11 Elastic Load Balancer 13 Web Server Instance Type 13 AWS ElastiCache – Redis Cluster
    [Show full text]
  • Getting Started with Openam / Openam 13.5
    Getting Started With OpenAM / OpenAM 13.5 Latest update: 13.5.2 Mark Craig Gene Hirayama ForgeRock AS 201 Mission St, Suite 2900 San Francisco, CA 94105, USA +1 415-599-1100 (US) www.forgerock.com Copyright © 2013-2018 ForgeRock AS. Abstract Quick introduction to OpenAM for new users and readers evaluating the product. OpenAM provides open source Authentication, Authorization, Entitlement, and Federation software. This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivs 3.0 Unported License. To view a copy of this license, visit https://creativecommons.org/licenses/by-nc-nd/3.0/ or send a letter to Creative Commons, 444 Castro Street, Suite 900, Mountain View, California, 94041, USA. ForgeRock® and ForgeRock Identity Platform™ are trademarks of ForgeRock Inc. or its subsidiaries in the U.S. and in other countries. Trademarks are the property of their respective owners. UNLESS OTHERWISE MUTUALLY AGREED BY THE PARTIES IN WRITING, LICENSOR OFFERS THE WORK AS-IS AND MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND CONCERNING THE WORK, EXPRESS, IMPLIED, STATUTORY OR OTHERWISE, INCLUDING, WITHOUT LIMITATION, WARRANTIES OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NONINFRINGEMENT, OR THE ABSENCE OF LATENT OR OTHER DEFECTS, ACCURACY, OR THE PRESENCE OF ABSENCE OF ERRORS, WHETHER OR NOT DISCOVERABLE. SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES, SO SUCH EXCLUSION MAY NOT APPLY TO YOU. EXCEPT TO THE EXTENT REQUIRED BY APPLICABLE LAW, IN NO EVENT WILL LICENSOR BE LIABLE TO YOU ON ANY LEGAL THEORY FOR ANY SPECIAL, INCIDENTAL, CONSEQUENTIAL, PUNITIVE OR EXEMPLARY DAMAGES ARISING OUT OF THIS LICENSE OR THE USE OF THE WORK, EVEN IF LICENSOR HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
    [Show full text]
  • ADFS3 and Openam 12 - Part 5: Centos/Openam Install Overview
    ADFS3 and OpenAM 12 - Part 5: CentOS/OpenAM install Overview This is Part 5 of a series of articles describing how to integrate Open AM v12 and ADFS 3 (2012 R2). See:ADFS 3 (Windows 2012 R2) and OpenAM 12. In order to demonstrate this we need an OpenAM instance that will become a trusted 'Claims Provider' configured in ADFS. If you already have an instance of OpenAM running and configured with SSL, then feel free to skip this part. Otherwise, the steps in this part assume assum e very limited knowledge of CentOS and OpenAM. There are plenty of other articles on this wiki, backstage.forgerock. com and the internet that describe, in more detail, the installation and configuration of CentOS and OpenAM. However, the steps here provide a shortcut to installing the environment for those who just want to prove the integration works. Whilst this part in the series can standalone from the previous parts (as they were all on the Windows machine) you should familiarise yourself with those steps because Part 6 will it all together. The previous parts are ADFS3 and OpenAM 12 - Part 1: Windows/IIS/Sample App, ADFS3 and OpenAM 12 - Part 2: Certificate Services, ADFS3 and OpenAM 12 - Part 3: ADFS Install, and ADFS3 and OpenAM 12 - Part 4: ADFS/WIF/Sample App First, we'll download and install a CentOS image as the 2nd Virtual Machine in VirtualBox, then we'll install and configure an OpenAM instance. In between we'll also install the Java Development Kit, Tomcat (the JEE container we'll use for OpenAM), configure SSL, tweak the 'hosts' file and the CentOS firewall.
    [Show full text]
  • Guide to Open Source Solutions
    White paper ___________________________ Guide to open source solutions “Guide to open source by Smile ” Page 2 PREAMBLE SMILE Smile is a company of engineers specialising in the implementing of open source solutions OM and the integrating of systems relying on open source. Smile is member of APRIL, the C . association for the promotion and defence of free software, Alliance Libre, PLOSS, and PLOSS RA, which are regional cluster associations of free software companies. OSS Smile has 600 throughout the World which makes it the largest company in Europe - specialising in open source. Since approximately 2000, Smile has been actively supervising developments in technology which enables it to discover the most promising open source products, to qualify and assess them so as to offer its clients the most accomplished, robust and sustainable products. SMILE . This approach has led to a range of white papers covering various fields of application: Content management (2004), portals (2005), business intelligence (2006), PHP frameworks (2007), virtualisation (2007), and electronic document management (2008), as well as PGIs/ERPs (2008). Among the works published in 2009, we would also cite “open source VPN’s”, “Firewall open source flow control”, and “Middleware”, within the framework of the WWW “System and Infrastructure” collection. Each of these works presents a selection of best open source solutions for the domain in question, their respective qualities as well as operational feedback. As open source solutions continue to acquire new domains, Smile will be there to help its clients benefit from these in a risk-free way. Smile is present in the European IT landscape as the integration architect of choice to support the largest companies in the adoption of the best open source solutions.
    [Show full text]
  • Protection Des Applications Web Avec Openam
    Protection des Applications Web avec OpenAM Ludovic Poitou RMLL: Rencontres Mondiales du Logiciel Libre - 2011 Wednesday, July 13, 2011 A Propos... Ludovic Poitou • Product Manager @ ForgeRock • OpenDJ : Open Source LDAP Directory Services • Community Manager et Contributeur • Architecte et Community Manager @ Sun Microsystems • Développeur polyglote mais spécialisé en LDAP et Java • Photographe amateur 2 Wednesday, July 13, 2011 Ce qu’il faut en retenir ForgeRock est un éditeur de logiciel FLOSS, spécialisé dans la gestion d’identité et la sécurité OpenAM une solution d’Authentification, Autorisation, Fédération et Gestion des Privileges La Passerelle Universelle permet de faire du Web SSO sans modifier les applications Disponible en logiciel libre : • http://openam.forgerock.org • http://forgerock.com/openam.html 3 Wednesday, July 13, 2011 ForgeRock Editeur de logiciels, 100 % open source ForgeRock.com Enterprise Open Source Software Fondée le 1er Février 2010 Grenoble, ForgeRock ForgeRock ForgeRock ForgeRock ForgeRock Engineering Center Norway USA UK France 35 Employés distribués sur Avril 2011, Acquisition de l’ensemble du globe ApexIdentity Un éco-système de Partenaires Consulting partners Training partners Presence through partners Souscriptions de Support et Formation* 4 4 Wednesday, July 13, 2011 ForgeRock - Identity & Access Management Users/systems Identity Services Managed resources Identity Management Registration & Self-Service Reconciliation Auditing & Compliance Provisioning Portals, applications, webservices Workflow &
    [Show full text]
  • Download Java Ee Jdk Without Glassfish
    Download java ee jdk without glassfish Is there any way I can install the Java EE SDK without the GlassFish Java because a bundle download package of Netbeans + the JDK exists. What you're asking is "can I get all the EE components" as a single download without GlassFish, NetBeans, etc. Well its helpful to know what. I assume you want the Java EE 6 API jar so you can write EJB applications Without Maven, you can download the jar from the repository. If your JDK installation is tied to the GlassFish application server, you (). Hi all is it possible to download Java EE SDK without GlassFish/GlassFish setup? Please I need a JDK I mean the latest one. The programs in my textbook are no more compiling guess it's kind of old. Please help. “Java Platform, Enterprise Edition 6 SDK Update 4 (with JDK 7u11)” or. java ee jdk without glassfish Download Link ?keyword=java-ee-jdk-without- glassfish&charset=utf-8 =========> java ee jdk without. GlassFish is the Open Source Java EE Reference Implementation; as such, we welcome external contributions. Make sure to read our Pull Request acceptance. Java EE 8 Tutorial Component. NetBeans IDE. Apache You can download JDK software from To Install NetBeans IDE without GlassFish Server. When you. Want all of our free Java training videos? Visit our Learning Library, which features all of our training courses. JDK 8 is required to use JavaFX 8 features in NetBeans IDE This download option also includes GlassFish Server Open Source Edition , from the Java EE download, launch the installer and select the Apache.
    [Show full text]
  • Site Reliability Engineers (SRE) Ensure Our Platform Scales, Handling Operations with a Software Engineering Approach
    Site Reliability Engineers (SRE) ensure our platform scales, handling operations with a software engineering approach. Criteo production systems that run products used by over 11k publishers and 8k e-commerce companies. These products create relevant digital ads in REAL-TIME and cross-devices in 50ms, half a million times per second. The operations platform is one of the largest commercial system in the world - spread across three continents and 8 datacenters with more than 17,000 servers. The Identity Management (IDM) team ensures that all Criteo environments and apps are reachable by the right people or service in a robust and effective manner. The mission is to develop and improve a system that authenticates and authorizes users and services on the worldwide production platform, both at infrastructure and application level, spanning over multiple Data Centers. The mission includes ownership and evolutions of the following components and services: • 3rd party identity management, entitlement and federation services such as Microsoft Identity Manager, Active Directory, OpenDJ and OpenAM • Kerberos everywhere on the infrastructure, including one of the largest Hadoop clusters worldwide • In-house application to handle authorizations at application level • In-house signatures infrastructure to handle service and user authentication Criteo’s significant growth provides you an opportunity to strategically influence the evolution of our production platform, processes, methodologies, technologies and so much more. You will be involved in decision making and in rolling out the changes with your team. Your ability to adapt to a fast moving environment will be a key element to our success. Your technical background and autonomy will help you fit in the IDM team.
    [Show full text]
  • Java Agents 5
    User Guide / Java Agents 5 Latest update: 5.0.1.1 ForgeRock AS 201 Mission St., Suite 2900 San Francisco, CA 94105, USA +1 415-599-1100 (US) www.forgerock.com Copyright © 2011-2017 ForgeRock AS. Abstract Guide to installing and managing ForgeRock® Access Management Java agents. ForgeRock Access Management provides open source authentication, authorization, entitlement, and federation software. This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivs 3.0 Unported License. To view a copy of this license, visit https://creativecommons.org/licenses/by-nc-nd/3.0/ or send a letter to Creative Commons, 444 Castro Street, Suite 900, Mountain View, California, 94041, USA. ForgeRock® and ForgeRock Identity Platform™ are trademarks of ForgeRock Inc. or its subsidiaries in the U.S. and in other countries. Trademarks are the property of their respective owners. UNLESS OTHERWISE MUTUALLY AGREED BY THE PARTIES IN WRITING, LICENSOR OFFERS THE WORK AS-IS AND MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND CONCERNING THE WORK, EXPRESS, IMPLIED, STATUTORY OR OTHERWISE, INCLUDING, WITHOUT LIMITATION, WARRANTIES OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NONINFRINGEMENT, OR THE ABSENCE OF LATENT OR OTHER DEFECTS, ACCURACY, OR THE PRESENCE OF ABSENCE OF ERRORS, WHETHER OR NOT DISCOVERABLE. SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES, SO SUCH EXCLUSION MAY NOT APPLY TO YOU. EXCEPT TO THE EXTENT REQUIRED BY APPLICABLE LAW, IN NO EVENT WILL LICENSOR BE LIABLE TO YOU ON ANY LEGAL THEORY FOR ANY SPECIAL, INCIDENTAL, CONSEQUENTIAL, PUNITIVE OR EXEMPLARY DAMAGES ARISING OUT OF THIS LICENSE OR THE USE OF THE WORK, EVEN IF LICENSOR HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
    [Show full text]
  • Meddream DICOM Viewer Servicing MANUAL (Version 6.1.1)
    UAB Softneta K. Barsausko st. 59, LT 51423 Kaunas, Lithuania [email protected] www.softneta.com MedDream DICOM Viewer Servicing MANUAL (version 6.1.1) © 2017, Softneta UAB, Kaunas All rights reserved in the event of granting of patents or registration as a utility patent. All names of companies and products mentioned in this user’s manual may be trademarks or registered trade- marks. References to products of other manufacturers are for information purposes only. Such references are intended neither as an approval nor a recommendation of these products. Softneta UAB accepts no liability for the performance or use of such products. Other brand names, software and hardware names used in this user’s manual are subject to trademark or patent protection. The quoting of products is for informational purposes only and does not represent a trademark misuse. This Servicing Manual is protected by copyright. Unless expressly authorized in writing, dissemination, duplication or other commercial exploitation of this documentation set or communication of its contents or parts of it is not permitted. In case of infringement, the violator may be liable to pay compensation for damages. Specifications due to technical developments are subject to change. This Servicing Manual is not subject to the revision service. Please contact the manufacturer or authorized dealer to request the latest edition of Servicing Manual. i Table of Contents 1 Introduction 1 2 Minimal server side requirements1 2.1 Minimal hardware requirements.....................................1
    [Show full text]
  • Plantilla Tesis
    Universidad de San Carlos de Guatemala Facultad de Ingeniería Escuela de Ingeniería en Ciencias y Sistemas IMPLEMENTACIÓN DEL SISTEMA CENTRALIZADO DE AUTENTICACIÓN Y AUTORIZACIÓN PARA LAS APLICACIONES WEB DEL CENTRO DE CÁLCULO E INVESTIGACIÓN DE LA FACULTAD DE INGENIERÍA DE LA UNIVERSIDAD DE SAN CARLOS DE GUATEMALA Juan Luis Angel Cano Moreno Asesorado por la Inga. Wendy Lissette Juárez Marroquín Guatemala, noviembre de 2014 UNIVERSIDAD DE SAN CARLOS DE GUATEMALA FACULTAD DE INGENIERÍA IMPLEMENTACIÓN DEL SISTEMA CENTRALIZADO DE AUTENTICACIÓN Y AUTORIZACIÓN PARA LAS APLICACIONES WEB DEL CENTRO DE CÁLCULO E INVESTIGACIÓN DE LA FACULTAD DE INGENIERÍA DE LA UNIVERSIDAD DE SAN CARLOS DE GUATEMALA TRABAJO DE GRADUACIÓN PRESENTADO A JUNTA DIRECTIVA DE LA FACULTAD DE INGENIERÍA POR JUAN LUIS ANGEL CANO MORENO ASESORADO POR LA ING. WENDY LISSETTE JUÁREZ MARROQUÍN AL CONFERÍRSELE EL TÍTULO DE INGENIERO EN CIENCIAS Y SISTEMAS GUATEMALA, NOVIEMBRE DE 2014 UNIVERSIDAD DE SAN CARLOS DE GUATEMALA FACULTAD DE INGENIERÍA NÓMINA DE JUNTA DIRECTIVA DECANO Ing. Murphy Olympo Paiz Recinos VOCAL I Ing. Alfredo Enrique Beber Aceituno VOCAL II Ing. Pedro Antonio Aguilar Polanco VOCAL III Inga. Elvia Miriam Ruballos Samayoa VOCAL IV Br. Narda Lucía Pacay Barrientos VOCAL V Br. Walter Rafael Véliz Muñoz SECRETARIO Ing. Hugo Humberto Rivera Pérez TRIBUNAL QUE PRACTICÓ EL EXAMEN GENERAL PRIVADO DECANO Ing. Murphy Olympo Paiz Recinos EXAMINADOR Ing. Marlon Antonio Perez Türk EXAMINADORA Inga. Floriza Felipa Ávila Pesquera de Medinilla EXAMINADORA Inga. Susán Verónica Gudiel Herrera SECRETARIO Ing. Hugo Humberto Rivera Pérez ACTO QUE DEDICO A: Mis padres Por creer siempre en mí, enseñarme los principios y valores que son fundamentales para alcanzar mis metas, además de su amor y cariño que me brindan día a día.
    [Show full text]
  • Devops Release Notes / Forgerock Identity Platform 6.5
    DevOps Release Notes / ForgeRock Identity Platform 6.5 Latest update: 6.5.2 Gina Cariaga David Goldsmith Shankar Raman ForgeRock AS. 201 Mission St., Suite 2900 San Francisco, CA 94105, USA +1 415-599-1100 (US) www.forgerock.com Copyright © 2018 ForgeRock AS. Abstract Information for deploying ForgeRock Identity Platform™ version 6.5 in DevOps environments. Includes late-breaking news about features, known issues, and using the forgeops repository. This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivs 3.0 Unported License. To view a copy of this license, visit https://creativecommons.org/licenses/by-nc-nd/3.0/ or send a letter to Creative Commons, 444 Castro Street, Suite 900, Mountain View, California, 94041, USA. ForgeRock® and ForgeRock Identity Platform™ are trademarks of ForgeRock Inc. or its subsidiaries in the U.S. and in other countries. Trademarks are the property of their respective owners. UNLESS OTHERWISE MUTUALLY AGREED BY THE PARTIES IN WRITING, LICENSOR OFFERS THE WORK AS-IS AND MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND CONCERNING THE WORK, EXPRESS, IMPLIED, STATUTORY OR OTHERWISE, INCLUDING, WITHOUT LIMITATION, WARRANTIES OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NONINFRINGEMENT, OR THE ABSENCE OF LATENT OR OTHER DEFECTS, ACCURACY, OR THE PRESENCE OF ABSENCE OF ERRORS, WHETHER OR NOT DISCOVERABLE. SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES, SO SUCH EXCLUSION MAY NOT APPLY TO YOU. EXCEPT TO THE EXTENT REQUIRED BY APPLICABLE LAW, IN NO EVENT WILL LICENSOR BE LIABLE TO YOU ON ANY LEGAL THEORY FOR ANY SPECIAL, INCIDENTAL, CONSEQUENTIAL, PUNITIVE OR EXEMPLARY DAMAGES ARISING OUT OF THIS LICENSE OR THE USE OF THE WORK, EVEN IF LICENSOR HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
    [Show full text]
  • Release Notes Openam 10
    Release Notes OpenAM 10 Mark Craig ForgeRock AS 201 Mission St., Suite 2900 San Francisco, CA 94105, USA +1 415-599-1100 (US) www.forgerock.com Copyright © 2011-2017 ForgeRock AS. Abstract Notes covering OpenAM prerequisites, fixes, known issues. OpenAM provides open source Authentication, Authorization, Entitlement and Federation software. This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivs 3.0 Unported License. To view a copy of this license, visit https://creativecommons.org/licenses/by-nc-nd/3.0/ or send a letter to Creative Commons, 444 Castro Street, Suite 900, Mountain View, California, 94041, USA. ForgeRock® and ForgeRock Identity Platform™ are trademarks of ForgeRock Inc. or its subsidiaries in the U.S. and in other countries. Trademarks are the property of their respective owners. UNLESS OTHERWISE MUTUALLY AGREED BY THE PARTIES IN WRITING, LICENSOR OFFERS THE WORK AS-IS AND MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND CONCERNING THE WORK, EXPRESS, IMPLIED, STATUTORY OR OTHERWISE, INCLUDING, WITHOUT LIMITATION, WARRANTIES OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NONINFRINGEMENT, OR THE ABSENCE OF LATENT OR OTHER DEFECTS, ACCURACY, OR THE PRESENCE OF ABSENCE OF ERRORS, WHETHER OR NOT DISCOVERABLE. SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES, SO SUCH EXCLUSION MAY NOT APPLY TO YOU. EXCEPT TO THE EXTENT REQUIRED BY APPLICABLE LAW, IN NO EVENT WILL LICENSOR BE LIABLE TO YOU ON ANY LEGAL THEORY FOR ANY SPECIAL, INCIDENTAL, CONSEQUENTIAL, PUNITIVE OR EXEMPLARY DAMAGES ARISING OUT OF THIS LICENSE OR THE USE OF THE WORK, EVEN IF LICENSOR HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
    [Show full text]