How to add new idp metadata in spring-SAML at runtime

Question

I am integrating spring-security-saml extension to support SSO in my web-application, my application should allow different customers to add their IDP metadata and their certificate to my webapp (which is an SP) so that my webapp can initiate SSO against their idp.

Right now I am defining a "metadata" bean in my java config where in I add the idp metadata to CachingMetadataManager. But this happens only once, I am not able to figure out how do I add a new idp metadata to MetadataManager at runtime (without re-starting my app). Can I just get the metadata bean from spring ApplicationContext and add a new provider to it? Will it work?

What is the general practice to support the above use case (adding new idp's at runtime) with spring-SAML? are there any other java libraries which support this.

Thanks in advance

Could you share a solution for other people like you who are stumbling upon this problem? — tryingToLearn, Feb 08 '18 at 11:09

score 11 · Accepted Answer · answered Nov 26 '14 at 17:10

11

The CachingMetadataManager is synchronized and you can add/remove MetadataProviders during runtime by getting the bean from the application context and calling addMetadataProvider/removeMetadataProvider.

answered Nov 26 '14 at 17:10

Vladimír Schäfer

15,375
2
51
71

3

But if I do this, wont customer1 be able to see IDPs configured by customer2 ? – articuno Nov 10 '16 at 06:21
@articuno Any luck with your implementation related to customer1 and customer2? how you ll seperate it? – sunder Feb 23 '18 at 08:41

How to add new idp metadata in spring-SAML at runtime

1 Answers1

Linked