VIAVI Solutions

Brochure

VIAVI

TeraVM

Security Assertion Markup Language (SAML).
Performance validation at scale
TeraVM™ supports validation for single-sign on (SSO) applications using
Security Assertion Markup Language (SAML), enabling users to measure
the capacity of the Identify/Service Provider by emulating millions of unique
Web Browser sessions. TeraVM’s stateful per-flow architecture enables usersof TeraVM to validate SAML performance with unique client credentials (including the useof digital certificates), with each and every emulated client having unique SAML assertions.
TeraVM supports validation of both SAML authentication
flow options:

Advantages

y IdP initiated (Authenticate with IdP and follow

y Emulate millions of SAML sessions

redirect to SP service)y SP initiated (Attempt connection to SP, follow redirect
to IdP, authenticate and return to SP)

Validating SAML 2.0 authentication
flows at scale
TeraVM is a stateful traffic emulator which enables
users validate SAML SSO in a number of unique ways,
this includes concurrent validation of both IdP and SP

y Unique credentials per client, supports theuse of digital certificatesy Supports both IdP and SP authentication
flow initiation

Featuresy Support of proprietary 3rd party
authentication flows
y Cloud platform enabled, support for AWS,Azure, and OpenStack

initiated authentication. TeraVM’s per flow architecturey Out of millions of SAML sessions, easily
pinpoint and isolate failed

further enhances the validation methodology byy SAML sessions

enabling unique SAML assertions per emulated client.
The flexible configuration options means users of
TeraVM can assess the reliability of SAML with poorly
configured assertions. Furthermore, the per-flow
capability enables users to validate performance formore complex SAML scenarios such as realm discovery,
using either unique user names, domain names, and/orurl associations.

Data SheetIdentity Provider (IdP)
Service Provider (SP)SAML User Agents

SAML SSO
TeraVM enulating stateful SAML clients and targeted application services

Introducing TeraVMof the targeted service and can be used to validate

TeraVM is an application-emulation and securityperformance solution, delivering comprehensive test
coverage for application services, wired, and wirelessrobustness of SAML by attempting to connect toadditional application services, using the assigned SAML
security tokens.
TeraVM can be deployed to cloud services such asnetworks.
TeraVM is offered as a virtualized solution enabling theflexibility to run anywhere - lab, datacenter, and thecloud, with consistent performance coverage, ensuringthat highly optimized networks and services can bedelivered with minimal risk.

Amazon Web Services (AWS), Azure, and/or OpenStack;allowing the user validate access privileges, performanceof throughput, and latency of core IdP and SP services,alongside the targeted SP application service in the cloud.

TeraVM SAML use cases

SAML emulation with the most realistic loadscenarios
Using TeraVM SAML, users can emulate the mostrealistic load scenarios for performance validation ofthroughput, connections, and latency for single sign-on

Realm Discovery
Validate performance using unique client credentials(username) and/or url requests originating at theemulated client.

services. TeraVM supports 3rd party SAML flows which

SAML Assertions

includes Citrix and F5.

Validate key SAML assertions such as lifetime of SAML

TeraVM emulates stateful SAML request and responses

tokens, validate new IdP profiles and/or malformed orused for validation of authentication flows originatingwith incomplete assertion values

at either the IdP or SP and/or the targeted application
service. After successful authentication, TeraVM’s perflow architecture can be used to validate performance
TeraVM Capability Overview
General

Real-time isolation of problem flows
Elastic test bed (up to 1Tbps)

Network interface support

Support for 1/10/40Gbps I/0
Mellanox ConnectX-4 support for 56/100Gbps

2 TeraVM Security Assertion Markup Language (SAML)

TeraVM Capability Overview
TCP / UDP, Teraflow, Ookla speed test

Data

HTTP (v1/2, incls. stateful response parser)
SMTP / POP3 (incl. file attachments)
FTP (Passive/Active), P2P applications, DNS
Address assignment

Configurable MAC
DHCP, PPPoE (IPv4 & IPv6)
Dual Stack (6RD, DS Lite)

Ethernet switch

VLAN tagging (up to 8 concurrent tags)
ACL, 802.1p, DSCP

Data center

VxLAN, GRE, SR-IOV

ReplayReplay large PCAP files TCP, UDP and raw data playback
Amplify and dynamically substitute data into PCAP files

VideoMulticast: IGMP v1/v2/v3 & MLD v1/v2
Automatic Multicast Tunneling (AMT)Video on Demand (VoD)
Adaptive Bit Rate Video (HLS, HDS, MPEG-DASH, smooth)Video conferencing, Webex

Secure access / VPN

Clientless VPN (SSL/TLS/DTLS), IPSec (IKEv1/v2), generic remote accessCisco AnyConnect SSL VPN Client, Cisco AnyConnect IPsec VPN
Cisco ScanSafe
Juniper Pulse, Juniper Network Connect
SAML (F5, Citrix SSO), Dell SSO
802.1x EAP-MD5

Securiy attack mitigation

spam / viruses / DDoS
Cybersecurity Database

Voice

VoIP: SIP & RTP (secure & unsecure), SMS
Dual-hosted UACs, SIP Trunking
Voice & video quality metric (MOS)

LTE/4G

EPC and RAN (Rel.8, 10, 11)
VoLTE (secure/unsecure), ViLTE
Wifi Offload (EoGRE)

SLA

TWAMP, PING

Automation

CLI, Perl, TCL, XML, Java API
Python, Jython
Qualisystems (CloudShell)
OpenStackContact Us	 +1 844 GO VIAVI(+1 844 468 4284)

VIAVI Solutions

To reach the VIAVI office nearest you,visit viavisolutions.com/contact© 2021 VIAVI Solutions Inc.
Product specifications and descriptions in thisdocument are subject to change without notice.
Patented as described atviavisolutions.com/patents
tvm-saml-pb-wir-nse-ae
30187450 900 0918
viavisolutions.com/wirelessvalidation