SAML and JWT

Excellent side-by-side comparison https://medium.com/@robert.broeckelmann/saml2-vs-jwt-a-comparison-254bafd98e6


Useful terminology:


https://en.wikipedia.org/wiki/Trusted_computing_base

Bearer Tokens

Holder of Key

Sender Vouches

Proof of Possession

IdP https://en.wikipedia.org/wiki/Identity_provider

WebLogic SAML tutorial

This video is very good to introduce the basic SAML concepts of IDP and SP
https://www.youtube.com/watch?v=S9BpeOmuEz4

One can use this http://www.oracle.com/technology/pub/articles/dev2arch/2006/12/sso-with-saml.html

as a starting point, and then this http://biemond.blogspot.com/2009/05/sso-with-weblogic-103-and-saml.html


A brief summary:

- enable SSL between the 2 domains. For this you need keystores with a key alias.
- add a SAML source in the Federation tab


Work in progress...