# Security protocols Jmeter-Gatling **URL:** \ **Category:** Archive\ **Tags:** performance-testing\ **Created:** [18 June 2019 12:02 UTC](https://club.ministryoftesting.com/t/security-protocols-jmeter-gatling/26565 "2019-06-18T12:02:27Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![spaniardnorge](https://sea2.discourse-cdn.com/flex020/user_avatar/club.ministryoftesting.com/spaniardnorge/32/5797_2.png) [@spaniardnorge](https://club.ministryoftesting.com/u/spaniardnorge)\ **Post date:** [18 June 2019 12:02 UTC](https://club.ministryoftesting.com/t/security-protocols-jmeter-gatling/26565/1 "2019-06-18T12:02:27Z")
Hello, Does Jmeter or Gatling support SAML, OpenID or JWT functionality out of the box? ---
**Author:** ![motareksamir](https://sea2.discourse-cdn.com/flex020/user_avatar/club.ministryoftesting.com/motareksamir/32/4817_2.png) [@motareksamir](https://club.ministryoftesting.com/u/motareksamir)\ **Post date:** [18 June 2019 13:57 UTC](https://club.ministryoftesting.com/t/security-protocols-jmeter-gatling/26565/2 "2019-06-18T13:57:08Z")
Hello Carlos , After a quick search i found the following articles about JMeter : **OpenID** > **[OpenID Connect - How to Load Test with JMeter | BlazeMeter](https://www.blazemeter.com/blog/openid-connect-how-to-load-test-with-jmeter/)** > > Learn to load test OpenID Connect, easily. Become the JMeter load testing pro with this guide for user authentication. Master authentication testing abilities. **JWT** > **[decode-JWT-token-in-Jmeter - Task Incomplete](http://www.taskincomplete.com/decode-jwt-token-in-jmeter/)** > > This tutorial will help you in decoding JWT token and sent by server to client. First how to identify the string is JWT token or some other String generated by Server. If the string is JWT then string should contain 3 dots (header,body,Signature).... **SAML** > **[How to Load Test SAML SSO Secured Websites with JMeter - DZone Performance](https://dzone.com/articles/how-to-load-test-saml-sso-secured-websites-with-jm)** > > JMeter is a power performance testing tool, and there's an easy way to get JMeter to work against a SAML SSO secured website. I didn’t work with the mentioned technologies, that’s why i’m not totally sure whether the provided links will be helpful or not for you. Thanks , Mohamed ---
**Author:** ![spaniardnorge](https://sea2.discourse-cdn.com/flex020/user_avatar/club.ministryoftesting.com/spaniardnorge/32/5797_2.png) [@spaniardnorge](https://club.ministryoftesting.com/u/spaniardnorge)\ **Post date:** [18 June 2019 14:24 UTC](https://club.ministryoftesting.com/t/security-protocols-jmeter-gatling/26565/3 "2019-06-18T14:24:26Z")
Hei Mohamed, Thanks for the links and your answer. I have contacted the head of sales for gatling and I got the following answer: _\> We don’t support either SAML not OpenID atm. Those are typical Enterprise features that we’ll implement if a customer is willing to contract with us in order to get them._ \*\> JWT tokens are just a matter of grabbing HTTP headers and sending them back, this is available out of the box. \* _\> But then, token refresh logic is not covered in the JWT spec and is application specific, so that’s something you’d have to implement in your tests._ …and since I can find some test examples for these technologies for Gatling, I just assume that neither Gatling nor Jmeter offer these functionalities “out of the box” but it is possible to create test scripts that has enough OpenID/SAML/JWT functionality to get the tests working (like the links that you have provided me) 🙂 Can it be like this? ---
**Author:** ![motareksamir](https://sea2.discourse-cdn.com/flex020/user_avatar/club.ministryoftesting.com/motareksamir/32/4817_2.png) [@motareksamir](https://club.ministryoftesting.com/u/motareksamir)\ **Post date:** [18 June 2019 14:34 UTC](https://club.ministryoftesting.com/t/security-protocols-jmeter-gatling/26565/4 "2019-06-18T14:34:25Z")
Hi Carlos , To be honest i don’t know anything about Gatling 🙂 , but for JMeter as you mentioned may be there is no out of the box support but you can create a script that do the required job. ---
**Author:** ![conrad.braam](https://sea2.discourse-cdn.com/flex020/user_avatar/club.ministryoftesting.com/conrad.braam/32/660_2.png) [@conrad.braam](https://club.ministryoftesting.com/u/conrad.braam)\ **Post date:** [28 July 2020 10:33 UTC](https://club.ministryoftesting.com/t/security-protocols-jmeter-gatling/26565/5 "2020-07-28T10:33:11Z")
A bit late to this party, only discovered JMeter today. SAML login or any other kinds of auth flow performance testing is possible, but not finding and actual showcase of this makes it hard for me to get a feel of how much effort it entails. I honestly don’t see the point of the simple load tests in most tutorials, where do people go to get an idea of the effort involved. Is the JMeter Cookbook by Bayo Erinle the only next step?