mule-module-saml

The Mule Module SAML project aims to provide authentication and authorization capabilities to Mule based on the SAML standard. Some of the (planned) features of this module are:

• Support for SAML over various transports (e.g. WebService via CXF and Axis, HTTP, etc).
• SAML based Security manager to verify saml assertions

News

On October 5th,the first version (0.0.1) of this module has been released. Currently, it has the following features:

• SAML Security manager which supports the configuration of various security realms
• Support for the Sender Vouches SAML scheme
• Initial support for the Holder-of-key scheme

Usage and configuration

To get started with this module, you are recommended to read the following descriptions:

1. Overall architecture - Overall architecture of the module
2. Usage and configuration - How to start with the Mule SAML configuration
3. SAML profiles - on the usage of the two main profiles: Sender Vouches and Holder of Key
   • Sender Vouches profile overview - How and when to use the Sender Vouches profile
   • Holder of key profile overview - How and when to use the Holder of key profile
4. Transport specific configuration - Defines the configuration specifics for each transport
   • CXF and SAML - Configuration of CXF using the SAML module
   • HTTP and SAML

Roadmap and planned features

The following features are planned to be added in various upcoming releases of this module. We would like to invite people to expand this list by discussing new feature requests on the mailing list of forum.

• LDAP as a key provider
• Extended holder of key support
• Support for more transports
• Upgrade to OpenSAML 2.0 to support SAML 2.0
• Support for authorizations in addition to authentication.
  • This may include support for e.g. XACML.