SSO Support for Rally RestAPI jar - rally

I have come across a post where SSO is supported or can be used using Rally.RestApi.dll, and C#. Below is the link
How to SSO using Rally.RestApi.dll?
Excel plugin available in Rally website works fine even with SSO. Then this should even work with Java Rest API, I believe.
But I would like to know whether Rally RestAPI.jar for Java can be used for SSO enabled Rally or not.
Is there any tips or tricks that can be employed to make it work?
I want to generate a customized rally report for my team. I am using Java and RallyRestAPI.jar for this.
Please suggest & help

C#
Rally Excel and VisualStudio plugins support SSO, and the next version of dll for the .NET toolkit will eventually replace the currently available dll v2.0.1, which is a year old. The new dll will use the SSO mechanism used in Rally Visual Studio plugin, and not the one implemented in current version of Excel plugin, and eventually Excel plugin will be updated with that mechanism as well. A timeframe for all this is not available yet.
Java
There is currently no work in progress and no plans to add SSO support for Rally Rest toolkit for Java.
It means that if your Rally subscription allows either a hybrid authentication (SSO and Rally authentication) or SSO with exceptions, your java code can use basic Rally authentication. In the former case your api user account has to be added to the exceptions list by your subscription administrator.

Related

Is it required to migrate to GIS when you're using google-oauth2?

This link https://developers.googleblog.com/2022/03/gis-jsweb-authz-migration.html says
Your full suite of apps and platforms may be using different methods of authentication and authorization from Google. The following are NOT affected by this deprecation announcement:
Android or iOS native app SDKs,
Backend platforms directly calling Google’s OAuth 2.0 or OpenID services.
I'm currently trying to understand our huge legacy code which might be affected by the GIS migration. Currently, we just redirect to https://accounts.google.com/o/oauth2/v2/auth to start the oauth2 process, once the user clicks the "Sign in with google" button. I've seen this link in the example of the old way from the migration document here: https://developers.google.com/identity/oauth2/web/guides/migration-to-gis#oauth-2.0-endpoints however I'm not sure if it is required to migrate to GIS or not.
From what I understand, only the frontend related libraries should be worried, but I'm dumb so maybe I'm misunderstanding. Can anyone help enlighten me?
Thanks.
You do not need to migrate if you are directly making calls to the Google's OAuth 2.0 endpoints.
The guide you reference recommends using the library with the note use the Google Identity Services library to support a less intrusive popup UX mode and to avoid having to manage complex OAuth 2.0 requests and responses. The intent there is to simplify your implementation not to force a migration.

Integrate Docusign with a zoho CRM custom module

I've been trying to integrate Docusign for our Zoho CRM modules.
I had researched that some similar applications doesn't support custom modules integration.
May I ask on how do you integrate Zoho CRM with a custom module I had created with Docusign? I am in need of help.
I had been linked here from the Docusign support:
DOCUSIGN SUPPORT
EDIT: We need to be able to issue documents from our custom module that I had created as a starting point. I am still not quite sure if this is possible will get back here for more updates

Should Keycloak be used in my website user registration and log in?

I am using JBoss JSF to develop a personal project, and the website needs a user registration and login feature, as many other sites do. There are lots of tutorials on how to develop a user registration component in Java EE and JPA framework. I just happened to find the KeyCloak project. It seems that KeyCloak can be used for user registration and management purpose, especially if you use JBoss to develop the application.
My question is, do I really need to use this for user registration? It seems very heavy, and I didn't find any API docs that I can refer to integrate it into my web application.
What's the best use case of Keycloak? And how to integrate it in a Java EE application? Any quickstart or tutorial for Java application would be appreciated.
The main Keycloak project includes a adapters documentation (to be used to secure clients) examples project showing how to secure a JEE application using JEE application security.
If you use Spring, there's a Spring Security adapter that support a more very flexible security implementation as well, including examples for this as well.

Ultimate SAML Component Pro library

We are planning to buy the license for SAML component from component pro but i want to make sure that it can be integrated with PHP moodle environment. We will be having ASP.Net web application which will act as IDP and user clicking on our website will transfer to Moodle PHP website which is being maintaned by other company. Its only us who will be using the Ultimate SAML component from component pro to create a SAML response and send it to them. But how can they read that SAML response without using the component pro library because the SAML response that i am sending is an object of SAMLResponse class from the library. I checked out all the sample projects and all the IDP and SP in the sample projects from component pro and all of them uses the comp pro library to create and read SAML responses. Basically i want create a SAML response using this library which can be read by SP without using the component pro library and we can have successful SSO integration. I apologies if i was not clear present my scenario.
SAML is a XML based standard. The SAMLResponse you are talking about will be marshalled to XML before the message is sent.
As long as your component and Moodle is correctly implementing SAML it doesn't matter what you are using to generate the SAML messages.
Agree with #Stefan. SAML is a protocol standard - how you implement it is irrelevant.
It's kind of like having English as a standard and the one side writes a message using Notepad and the other side reads it using Word.
Notepad != Word but because they both use English it doesn't matter.
Just a word of warning - SAML is a huge protocol - not all implementations support all sections.
My SAML plugin for moodle, based on simplesamlphp should be compatible with that IdP. Is free and many organizations are using it. https://moodle.org/plugins/view.php?plugin=auth_saml

Use SAP Logon ticket with .Net Application using SSO22KerbMap or SAPSSOEXT

I am looking into option on using Single Sign On (SSO) from a SAP Portal to a Non-SAP ASP .Net application. Reading through the documents and online searches, I found there are couple of approaches
1. Use "SAPSSOEXT" to evaluate the Logon ticket in the .Net application.
2. Use "SSO22KerbMap" ISAPI module.
The .Net application is already configured to use Integrated Windows Authentication using Active Directory. But, now we need to support SSO from SAP Portal. Without SSO, if a User A signs into the .net app from a User B's system, the .net app would Windows authentication and treat the user B as the logged in User.
Option 1 involves developing new code for the .net application as it currently does not support it and it may not be possible in my case.
Option 2 sounds very promising, but I am not very clear on how this would work. It sounds like the module verifies the SAP Logon ticket and acquires a constrained kerberos ticket. But, I am confused as how would the .Net application use this constrained kerberos ticket. Is Option 2 a seamless bridge that I could just install and suddenly the .net app support SSO like Magic? I would love if it did that, but sounds too good to be true.