Stack Overflow
Stack Overflow

Questions tagged [opensaml]

OpenSAML is a java and c++ library that provides low level handling of SAML messages

Reference for downloading the library and its general documentation: https://wiki.shibboleth.net/confluence/display/OpenSAML/Home

377 questions
9
votes
2 answers

Should the same SAML Response be accepted twice, multiple times?

Should a SAML federation software accept the same SAML response as long as it is within the allowed SAML token lifetime? In simpler terms: IDP (identify provider) issues a SAML response, then SP (service provider) accepts/processes it. Can the same…
Alex Kovshovik
  • 4,085
  • 4
  • 35
  • 36
8
votes
1 answer

What is the point of OpenSAML? Any alternative?

I'm currently working on setting up a SAML IDP. At first, I thought spring-security-saml would help me, but I figured out that it only helps on setting up the SP side of the SAML protocol. So I thought: let's go, let's use OpenSAML to make it. And…
sjahan
  • 5,720
  • 3
  • 19
  • 42
8
votes
1 answer

OpenSAML (2.0) Signature validation not working

Problem: I am using OpenSAML to build a means of authenticating the SAML 2.0 response posted to our servers. I have got most of it working, with the ability to access the various aspects of the assertion. The only issue is that when I attempt to…
schlock
  • 519
  • 3
  • 5
  • 14
8
votes
1 answer

Maven OpenSAML dependency issue

I have been assigned a task to implement SAML between my company and a client. I was looking at using OpenSAML but I am struggling to set up the maven project. I add the…
Craig
  • 199
  • 1
  • 2
  • 11
7
votes
4 answers

In order to implement SAML do I need Shibboleth SP installed on my host?

I got a couple of SAML implementation questions to clear up my confusion ... I need to implement SSO in a java web app. In order to do so, do I need Shibboleth SP installed on my host like so, or can I provide the SP functionality via OpenSAML? I…
mahatmanich
  • 10,791
  • 5
  • 63
  • 82
7
votes
2 answers

Create SAML Assertion and Sign the response

I have a Java web application. I want to implement SAML Single-Sign-On login for my application. I have got this GitHub onelogin program to send request and get response. But it was not working properly. I created one account there. But I don't have…
user2094311
7
votes
1 answer

Is there a standard format of SAML 2.0 encrypted assertion

I am implementing an SP initiated web browser SAML SSO profile in JBOSS. My application is the SP. After login, I expect the IDP to send me an encrypted assertion of the following format: ... …
user1825949
  • 255
  • 1
  • 8
  • 14
6
votes
1 answer

How to stop maven-shade-plugin from blocking java.util.ServiceLoader initialization of opensaml-impl types

When using OpenSAML 3, you must first load components from the opensaml-saml-impl artifact with the following line of code: InitializationService.initialize(); This uses java.util.ServiceLoader to load any type which implements Initializer. When I…
Craig Stuntz
  • 125,891
  • 12
  • 252
  • 273
6
votes
1 answer

SSO - SAML, Redirect a user to a specified landing page after successful log in

I am implementing SSO where I am the Identity Provider, right now I am able to successfully log into the Service Provider. But it takes me to the home page. I want to specify the landing page URL when I post the response. Have searched quite a lot…
user3391212
  • 71
  • 1
  • 1
  • 3
6
votes
1 answer

Unable to locate metadata for identity provider

I'm trying to configure both Shibboleth service provider and identity provider on localhost for testing purposes. The problem is that I'm getting "unable to locate metadata for identity provider" error when trying to access a protected resource.…
Vsevolod
  • 512
  • 1
  • 5
  • 16
6
votes
2 answers

Signing response using openSAML

I am attempting to implement SAML 2.0 by signing the response, instead of the Assertion. I have 3 existing vendors that accept my signature at the Assertion level, however a new vendor is requesting it at the protocol / response level. I have been…
Devon
  • 63
  • 1
  • 5
5
votes
0 answers

Generate DigestValue and SignatureValue in AuthnRequest's signature Using OpenSaml

I want to set DigestValue and SignatureValue into Signature of Authnrequest using OpenSaml. Recently generated authnrequest is..
Mahipal Choudhary
  • 391
  • 1
  • 10
5
votes
3 answers

how to create own IDP for SAML in java or node

I want to create a SSO to be used by multiple applications, what would be the best way to do it. I was going through SAML2.0 but I am confused as I didn’t find any articles to create own/custom SAML IDP. 1.How feasible it is to create own…
vamsi nirala
  • 75
  • 1
  • 1
  • 5
5
votes
1 answer

Differences between SAML/OpenSAML/Shibboleth and OAuth/OpenId

1) I don't concretely underdstand fundamental differences between SAML and OAuth. OAuth is for authorization but OpenId for authentication too and SAML both authorization and authentication ? And why to use a combination of both technologies ? 2)…
Danton
  • 221
  • 2
  • 13
5
votes
0 answers

OpenSAML v3 - Validate SAML Response

We are implementing Service provider for IDP initiated SSO. We are using open SAML v3 java library to parse the SAML response using POST. I want to validate the SAML data and format, so trying to figure out is there any inbuilt methods which I can…
anonymous
  • 61
  • 3
1
2
3
…
25 26