samlsinglesignon extension in ccv2

[stefanweis]

I am currently integrating the samlsinglesignon extension into our hybris project and I'm following this tutorial: https://help.sap.com/viewer/cbcb79db996a4d2989fd1c6249e8ee84/1811/en-US/e25a1bfadc3a4f1e8efc8caf1aed...

Locally I can get everything to work, but I'm wondering how I would apply step 9 to a ccv2 instance, as I am not able to connect to a cloud stage via SSH for example.

Can anyone help me out with that?
Thanks!

[wolfgang_pichler_ecx · Accepted solution]

Hi Stefan,

If you follow the instructions on this tutorial 1by1 you will have additional issues in ccv2 as you cannot modify files within platform/.. subfolders directly (e.g. hybris\bin\modules\platform\samlsinglesignon\web\webroot\WEB-INF\security\metadata.xml.)

So you will need so specify different paths instead in your local.properties file (or manifest.json, or directly in cloud portal - whatever you prefer).

Take a look which properties you might need to adjust at https://help.sap.com/viewer/d0224eca81e249cb821f2cdf45a82ace/1811/en-US/8c466ccc8669101483efc0994591...

Default values for file-locations are well documented in there.

e.g.

${sso.metadata.location:./WEB-INF/security/metadata.xml}
${sso.keystore.location:/WEB-INF/security/samlKeystore.jks}
${sso.keystore.privatekey.password:changeit}
...

Regarding the keytool command: keytool -importcert -alias any -file cer.cer -keystore samlKeystore.jks

In CCV2 Cloud Portal you can upload "Security Files" and "Trust Certificates" in the "Security" tab.

Afterwards you need to assign them to your CCV2 environment via "Deployment Configuration".

see documentation about Security File Managment: https://help.sap.com/viewer/0fa6bcf4736c46f78c248512391eb467/v2105/en-US/541d688a492f455f989e73844e2...

Hope that helps,

Cheers

[stefanweis · Accepted solution]

Thank you very mich! This helps a lot.

Quick question I just tried to upload the metadata.xml and keystore files in the ccv2 portal. The keystore file was uploaded successfully, but it says that xml files are mot allowed.