AEM SAML Authentication handler + CURL | Community
Skip to main content
New Participant
Jul 7, 2020 10:32 AM UTC
Solved

AEM SAML Authentication handler + CURL

Hi 

 

I have setup SAML auth handler on my AEM Authors and Publishers. Users are able to login and perform the required operations. My issue is - 

We use Jenkins/jules for build and release, jenkins uses cURL to upload and install code on the AEM instances. With SAML handler forwarding requests to IDP for authentication I am unable to get this working. In the past we used AEM system users but now we have a corp requirement to not use system accounds and use FID's with breakglass for password. Please share any ideas on how i can enable cURL to authenticate over SAML or if there are any workarounds

thanks for your help

regards- Vijay

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
leoberliantAccepted solution
Employee
Jul 7, 2020 1:05 PM UTC

Despite the SAML configuration you still can log as a local user to CRXDe. For that you can possibly use someting like:

curl -sv -X POST -u "admin:*******" -b <COOKIE FILE> --data "j_username=admin" --data "j_password=********" --data "j_workspace=crx.default" --data "j_validate=true" --data "_charset_=utf-8" http://<host>:<port>/libs/granite/core/content/login.html/j_security_check 

2 replies

leoberliantAccepted solution
Employee
Jul 7, 2020 1:05 PM UTC

Despite the SAML configuration you still can log as a local user to CRXDe. For that you can possibly use someting like:

curl -sv -X POST -u "admin:*******" -b <COOKIE FILE> --data "j_username=admin" --data "j_password=********" --data "j_workspace=crx.default" --data "j_validate=true" --data "_charset_=utf-8" http://<host>:<port>/libs/granite/core/content/login.html/j_security_check 

Translate
VijayCh8Author
New Participant
Jul 23, 2020 9:10 PM UTC
Thanks for the reponse. We are not allowed to use local / system users to upload and install code / jar files on AEM, we have a compliance requirement to use a FID on LDAP. Please addvice
Translate