HTTP Proxy for artifact binding
14.5. How to set up a proxy for SAML artifact binding

When using SAML artifact binding the SAML SP (service provider) sends an artifact resolution request to the SAML IdP (identity provider). This article explains how to use an HTTP proxy for this request (Airlock IAM as SAML SP).

Procedure-related prerequisites

Instruction

  • 1.
    Open the instance.properties in the instance folder (e.g. instances/auth/) for editing.
  • 2.
    Edit the line iam.java.opts to contain
  • copy
    -Dhttps.proxyHost=proxy.host -Dhttps.proxyPort=8080 -Dhttps.proxySet=true

    Note: Change the proxy host and port number according to your proxy setup requirements.

  • 3.
    Optional: To exclude hosts (i.e. localhost) from the proxy path, add the following to iam.java.opts:
  • copy
    -Dhttp.nonProxyHosts="localhost|host.example.com"
  • The proxy is now configured and enabled for SAML.

Further information and links