Stack Overflow
Stack Overflow

Questions tagged [opensaml]

OpenSAML is a java and c++ library that provides low level handling of SAML messages

Reference for downloading the library and its general documentation: https://wiki.shibboleth.net/confluence/display/OpenSAML/Home

377 questions
3
votes
1 answer

Global security configuration in OpenSAML 3.0+

I'm upgrading OpenSAML in a Java 8 project from v 2.6.1 to 3.3.1 A lot of code compilation errors are fixable pretty easy but I'm stuck at a certain point. If we use a signing Algorithm we had previously following code: KeyPair signingKeyPair =…
Lumpi
  • 69
  • 1
  • 10
3
votes
1 answer

SAML2.0 signature validation failed for SAML Response

I have created SAML2.0 response and signed it using OpenSAML java library. Though SAML created is a valid XML, the signature is not valid (Validated using online SAML tools) and also my SP is not able to verify the signature with the certificate…
A. Rac
  • 33
  • 1
  • 4
3
votes
1 answer

OpenSAML 2 to 3 migration, how to do an authentication redirect?

I updated the OpenSAML dependency in my project from 2.6.5 to 3.3.0 and managed to migrate the most of my code including initialization of the library. The one only last method I am unable to migrate is the method responsible for authentication…
Danny Lo
  • 1,553
  • 4
  • 26
  • 48
3
votes
1 answer

HTTP-Post binding with isPassive

My question is very similar to: How should I be implementing the HTTP POST Protocol Binding for SAML WebSSO Profile? But I couldn't find a proper answer in it. Is it possible to send a request via an HTTP-Post binding with isPassive set to true. The…
anpatel
  • 1,952
  • 4
  • 19
  • 36
3
votes
1 answer

Validate SAML Assertion against Credential - opensaml 3

I've validated the signature using SAMLSignatureProfileValidator but from my understanding when I validate a signature using this, it only makes sure the response hasn't been tampered with. I.e. it checks the structure of the signature to make sure…
anpatel
  • 1,952
  • 4
  • 19
  • 36
3
votes
3 answers

How to Sign SAML Response using Open SAML?

I have to implement a similar logic to this in Java. I have an XML which is not signed and the message before sending to Service provider. I have both private and public key and unsigned XML. Can some one help me providing a code snippet exactly…
Ashish
  • 39
  • 1
  • 2
3
votes
0 answers

Working Maven project into jar or extracted opensaml 3 dependencies will result in org.opensaml.core.xml.io.Marshaller is null

I have a maven (m2e eclipse) project with these dependencies: junit junit 3.8.1 test …
Gobliins
  • 3,848
  • 16
  • 67
  • 122
3
votes
2 answers

How to create a valid SAML 2.0 Assertion with OpenSAML library in Java

I am new to the OAuth2 concepts, SAML assertion and OpenSAML library in Java. I need my Java code to create a saml 2.0 assertions (may be XML string) using OpenSAML library. How we can create it? Please share the code and XML SAML 2.0 assertion.
user5268786
3
votes
2 answers

unable to get signature value in SAMLResponse

I have integrated my web site with TFIM for SSO. SSO is working fine but i am unable to get the Signature in SAMLResponse. it's getting null. but it is already there in SAMLResponse. When am trying to get the signature value from samlresponse it…
Musaddique S
  • 1,539
  • 2
  • 15
  • 36
3
votes
1 answer

ADFS and SAML 2.0 using OpenSAML in Java

I am going to implement Single Sign On using ADFS and SAML 2.0. I have done alot of search on where to start the process. I am provided with the URL of the ADFS service. Do I need to hit that url with GET/POST request having an SAML 2.0 Assertion as…
Muhammad Salman Farooq
  • 1,325
  • 9
  • 26
  • 54
3
votes
1 answer

SAML marshalling opensaml and java

I have recently upgraded opensaml dependency from 2.5.3 to 2.6.1 and xmlutil from 1.3.0 to 1.4.1. It compiles without any errors but while running the application i get the following…
avinash chavan
  • 729
  • 2
  • 11
  • 27
3
votes
1 answer

OIOSAML AuthnResponse: Unable to encrypt assertion

I want to implement a simple scenario: User trying to get access a protected resource of information system Information system sends a request to the identity provider to authenticate the user Identity provider verifies that the user has an open…
user1134181
3
votes
1 answer

SAML 2.0 Decrypting EncryptedAssertion removes a namespace declaration?

I am writing a web service that receives an encrypted SAML assertion. Before the SAML assertion was encrypted it could be verified. When my service decrypts the EncryptedAssertion it can not verify the assertion signature To look into why that is,…
joensson
  • 1,967
  • 1
  • 22
  • 18
3
votes
1 answer

SAML Standard for Service Provider Attribute Mapping

We run a Shibboleth Identity Provider, and have been increasingly asked to integrate with applications using non-Shibboleth SAML solutions, and encountering difficulty with regard to attribute naming. With a pure Shibboleth IdP & SP relationship, I…
HOG Wild
  • 208
  • 1
  • 8
3
votes
2 answers

Validate IDP initiated SAML2.0 Response

SAML experts please help!!!! Am very new to SAML and JSP. I wanna validate a IDP(identity provider) initiated SAML response token using Opensaml library in java(Environment linux,Tomcat6.0) and retrieve the Attribute information sent such as…
Ramesh Kumar
  • 63
  • 1
  • 1
  • 7
1 2 3
…
25 26