hide footbox
autonumber
participant "Client\n(eg JEE App)" as cli
participant "SAML IdP\n(eg Shibboleth)" as idp
participant "Knox\nGW" as gw #lime
participant "Hadoop\n(eg NN)" as svc #lime
activate cli
group Non-normative example of how a saml-bearer-token might be obtained
cli -> idp: /authenticate.POST(username,password)
activate idp
cli <-- idp: ok200(saml-bearer-token)
deactivate idp
end
|||...later...
cli -> gw: /cluster/service.GET(saml-bearer-token)
activate gw
gw -> gw: validate(saml-bearer-token):username
gw -> svc: /service.GET(username)
activate svc
gw <-- svc: ok200(results)
deactivate svc
cli <-- gw: ok200(results)
deactivate gw
deactivate cli | 