Questions tagged [opensaml]

OpenSAML is a java and c++ library that provides low level handling of SAML messages

Reference for downloading the library and its general documentation: https://wiki.shibboleth.net/confluence/display/OpenSAML/Home

377 questions
5
votes
2 answers

SAMLException: Response has invalid status code status message is null

Im trying to implement spring-securtiy-saml integration as a SP with an adfs system, and im bumping my head for some days now with this exception happening when SAMLResponnse is sent back from the ADFS after successful authentication and the…
5
votes
1 answer

SAML 2.0 IsPassive option

When working on an Apache Tomcat SAML 2.0 based single-sign-on (SSO), I came across the property named 'IsPassive' under SAML 2.0 Authentication Requests. The SAML 2.0 spec introduces this as follows: IsPassive [Optional] A Boolean value. If…
Chiranga Alwis
  • 1,049
  • 1
  • 25
  • 47
5
votes
1 answer

OpenSaml3 Documentation

Does anyone know if there is any documentation for OpenSaml3 anywhere? Paid or otherwise? I know there used to be a $15 book available, but I believe that only covers OpenSaml2. I know this will probably get voted down as it not a programming…
csyperski
  • 992
  • 3
  • 15
  • 33
5
votes
0 answers

java.security.SignatureException Signature length not correct: got 128 but was expecting 512

I am using Shiboleth opensaml (http://shibboleth.net/downloads/java-opensaml/) library for SAML and recently, after upgrading the libraries (the reason for upgrade was a NoSuchMethodError), the server started throwing the following exception during…
5
votes
4 answers

How to set Signature DigestMethod algorithm using OpenSAML

We can set the signature algorithm as following: signature.setSignatureAlgorithm("http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"); I'm trying to find a way to set the DigestMethod algorithm like that. Is it possible via OpenSAML APIs? Any input…
drox
  • 7,523
  • 4
  • 23
  • 34
4
votes
2 answers

OpenSAML custom attribute value

I'm trying to create a SAML response. One of the attributes that makes up the assertion is called address and the attribute value needs to be a custom type that is defined in an XSD. How do I add custom attribute value types to the response?
Dunc
  • 7,688
  • 10
  • 31
  • 38
4
votes
1 answer

Opensaml unmarshallMessage giving opensaml local part cannot be "null" when creating a QName Exception

I am using Spring SAML, from IDP response I am receiving issuer as an attribute ID, So I wanted to change the response after receiving in spring saml, so I have overridden method unmarshall which will parse the message and changed the xml elements…
ashok
  • 1,078
  • 3
  • 20
  • 63
4
votes
1 answer

SAML authentication using salesforce.com

In our web application I want Identity provider (IdP) which authenticate users using salesforce.com. I have done with Single Sign-On Settings at salesforce.com. After these setting salesforce provide a metadata file. Please tell me: Is there any…
Muhammad Imran Tariq
  • 22,654
  • 47
  • 125
  • 190
4
votes
1 answer

java.lang.ClassCastException: org.opensaml.core.xml.schema.impl.XSAnyBuilder cannot be cast to org.opensaml.xml.XMLObjectBuilder

In our application, we are trying to upgrade to Spring boot 2, We are using spring-security-saml2-core:1.0.4.RELEASE, while running application we are getting following exception. It seems, there are two jars xmltooling-1.4.6 and…
pankiba
  • 235
  • 1
  • 5
  • 12
4
votes
1 answer

How to send a SAML Request?

i want to send a SAML request to my IDP (Azure AD) but ia m not sure how to send the request at all. First i used OpenSAML to build an AuthRequest. Which i encoded as a String. Now i wanted to use ApacheHttpClient to send the request and read the…
Gobliins
  • 3,848
  • 16
  • 67
  • 122
4
votes
1 answer

How do I add SignatureValue and KeyInfo to OpenSaml3 Response?

In OpenSAML 2.5, I used the following code to generate a SAML Assertion with Security Certificate details: Credential signingCredential = sign.getSigningCredential(); Signature signature = null; try { …
S. Greenberg
  • 61
  • 1
  • 4
4
votes
2 answers

Using SAML Assertion in XSD

I have a webservice operation where i'll be getting SAML Assertion as part of the request Body. I have following XSD:
avinash chavan
  • 729
  • 2
  • 11
  • 27
4
votes
2 answers

OpenSaml AuthnRequest signature

I'm building a SAML 2.0 AuthNRequest. I managed to add signature informations using OpenSaml but i can't find a way to add and VALUES using the library. Here is the code: public String buildAuthnRequest() …
Yuri Blanc
  • 636
  • 10
  • 24
4
votes
2 answers

SAML 2.0 - Multiple AssertionConsumerService in SP

I implement a SAML 2.0 SP. I have a login servlet with endpoint https://my.domain.com/mng/samlLogin, so in the SP metadata file I define:
user1825949
  • 255
  • 1
  • 8
  • 14
4
votes
1 answer

Do we need Keystore/JKSKeyManager in IDP initiated SSO (SAML)?

I've successfully implemented SSO authentication using Spring-SAML extension. Primary requirement for us to support IDP-initiated SSO to our application. Well, by using the configurations from spring-security-saml2-sample even SP-initiated SSO flow…
kotacc
  • 327
  • 2
  • 12
1 2
3
25 26