[SYNCOPE-1129] Third Party JWT SSO integration

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0.4, 2.1.0
• Component/s: core
• Assignee: Francesco Chicchiriccò
• Reporter: Colm O hEigeartaigh
• Created: 27/Jun/17 14:13
• Updated: 05/Jul/17 10:22
• Resolved: 28/Jun/17 14:28

Description

This task is to support SSO using third party JWT tokens.

It involves two tasks:

a) Create a new interface extending JwsSignatureVerifier to provide a method to resolve a JWT subject into Syncope username (known user).

b) When processing a received token, if the issuer is different from the known issuer ("jwtIssuer" in security.properties), then instead of retrieving the default jwsSignatureVerifier implementation, the authentication component will enable the ClassPathScanImplementationLookup to dynamically discover an implementation of the interface above.

Issue Links

• is broken by: SYNCOPE-1149 Access token still required for the third party JWT SSO integration scenario
• links to: ML thread