How to set up a proxy for SAML artifact binding

When using SAML artifact binding the SAML SP (service provider) sends an artifact resolution request to the SAML IdP (identity provider). This article explains how to use an HTTP proxy for this request (Airlock IAM as SAML SP).

• Airlock IAM is used as SAML SP (service provider).
• SSO with HTTP artifact binding is configured.

1. Open the instance.properties in the instance folder (e.g. instances/auth/) for editing.
2. Edit the line iam.java.opts to contain
copy



-Dhttps.proxyHost=proxy.host -Dhttps.proxyPort=8080 -Dhttps.proxySet=true

Note: Change the proxy host and port number according to your proxy setup requirements.

3. Optional: To exclude hosts (i.e. localhost) from the proxy path, add the following to iam.java.opts:
copy



-Dhttp.nonProxyHosts="localhost|host.example.com"

4. The proxy is now configured and enabled for SAML.

• For information about instance.properties and iam.java.opts, see: Application parameters