Questions tagged [saml-2.0]

Security Assertion Markup Language 2.0 (SAML 2.0) is a standard providing means to exchange authentication and authorization data between security domains. It is typically used to achieve cross-domain single sign-on (SSO) and creation of security tokens.

Security Assertion Markup Language () is an -based open standard for exchanging authentication and authorization data between security domains, that is, between an identity provider (a producer of assertions) and a service provider (a consumer of assertions). is a product of the Security Services Technical Committee.

SAML version 2 () adds digital signatures and resolves back into the SAML standard enhancements made to the SAML 1.1 () specification by other systems (for instance Shibboleth and WS-federation).

SAML 2.0 is significantly different from SAML 1.1 and is not backwards compatible, although many systems can handle both.

Questions should have this tag when they are specifically related to SAML 2.0, more general SAML questions should have the less specific tag instead.

3007 questions
13
votes
1 answer

SAML for Native Mobile Apps(Android and IOS)

I have been searching for quite long time, whether SAML Authentication available for Mobile Apps. I went through the oneLogin developer portal completely, but could not find any documents on Android and IOS Api. Can somebody please confirm me…
Veerendra
  • 141
  • 1
  • 1
  • 4
13
votes
2 answers

InvalidNameIDPolicy working with ADFS

I have many clients that uses SSO, for that we use SAML 2. Many of my clients uses providers like Okta, PingIdentity and a bunch of them ADFS. Doing the integration with ADFS always at the beginning raises this error when they came back with the…
wcpaez
  • 321
  • 1
  • 3
  • 9
13
votes
5 answers

Spring SAML Sample application returns Could not initialize class org.apache.commons.ssl.TrustMaterial

I have been trying to get the Spring SAML Sample application up and running, but have been struggling for days, and searching the internet with no success. I have followed all the steps in the Quick start guide.... when I click the 'Start single…
Nikolai von Veh
  • 133
  • 1
  • 5
12
votes
2 answers

Decrypting encrypted assertion using SAML 2.0 in java using OpenSAML

I have a problem while trying to decrypt encrypted assertion using SAML 2.0. The library I am using is OpenSAML Java libraries 2.5.2. The encrypted assertion looks like this:
thewalrusnp
  • 427
  • 1
  • 4
  • 15
12
votes
1 answer

Setting up SAML callback in Rails using Devise and OmniAuth-SAML

EDIT: Additional info and condensed question near the bottom ;) I'm setting up integration between a small app I'm making and an identity provider using SAML2.0. In general, I've been following the instructions on the Devise page, and then on the…
a p
  • 3,098
  • 2
  • 24
  • 46
12
votes
2 answers

Steps to implement SSO for php application

I am a newbie in SSO implementation. We are looking at implementing SSO for a client that uses a php application (supported by us), for their employees to login to the application. We are in the process of setting up Simple SAML for this .. I have…
Mvc Learner
  • 189
  • 2
  • 3
  • 16
12
votes
1 answer

How to use opensaml v3? There is little to no documentation and v2 is EOL

Is there an end to end example of using Open SAML library v3? I can't find any documentation and as per https://wiki.shibboleth.net/confluence/display/OpenSAML/Home the v2 is EOL. I'm using following code to get SAML assertion- private…
gauravphoenix
  • 2,814
  • 3
  • 25
  • 33
12
votes
5 answers

Keycloak IdP SAML 2 Export of XML metdata to an SP

I'm using Keycloak version 1.6.1, newly installed as a standalone application. Keycloak should act as an IdP (Identity provider) for an SP (Service Provider) called Tableau. I have read from this page:…
Fowler
  • 367
  • 1
  • 2
  • 7
12
votes
1 answer

Python - Logging in to Site with SAML 2.0

I am struggle to find resources to help me with an issue I have. I have a site secured with SAML 2.0. Can someone point me to a resource(s) showing how to login to a site using SAML 2.0? Most of the python modules out there seem to be in regards…
code base 5000
  • 3,812
  • 13
  • 44
  • 73
12
votes
2 answers

How to create a self-signed x509 certificate with both private and public keys?

I am creating an SSO "proof of concept" using SAML2 and ADFS2 (IdP). Log In is working fine, however ADFS2 is requiring that my Logout request be signed (with a private key) and then I would imagine that I would then add that very same certificate…
Brian David Berman
  • 7,514
  • 26
  • 77
  • 144
12
votes
2 answers

What is the purpose of SAML 2 Subject Name Identifier?

When doing authn against a SAML 2 IdP, what does the Subject Name Identifier supposed to be for? Does it track each user login? I'm wondering if my SAML 2 service provider application should track these for different users. Since they are transient,…
danludwig
  • 46,965
  • 25
  • 159
  • 237
11
votes
3 answers

Consume SAMLResponse Token

SAML sp-based authentication has following short workflow. User wants to access application at sp. sp sends SAMLRequest token to idp. idp consume it and generate SAMLResponse token. idp sends this SAMLResponse token to AC-URL given by sp. My…
Muhammad Imran Tariq
  • 22,654
  • 47
  • 125
  • 190
11
votes
1 answer

How to verify an X509Certificate2 against an X509Certificate2Collection chain

I'm writing a SAML 2.0 response parser to handle POST authentication in ASP.Net (in C# and MVC, but that's less relevant). So I have a .p7b file to validate with and that can be read into a X509Certificate2Collection and a sample assertion - a base…
Keith
  • 150,284
  • 78
  • 298
  • 434
11
votes
1 answer

SAML Signing Certificate - Which SSL Certificate Type?

We're currently developing an SSL solution using SAML 2.0, and until now, have been using self signed certificates for signing the XML requests. However, as we move to production, we want to use a certificate from a certificate authority. But I'm…
stevehayter
  • 796
  • 1
  • 7
  • 23
11
votes
2 answers

SSL configuration issue with Spring-SAML

I'm trying to set up a SP based on "spring-security-saml2-sample", but when I deploy the WAR file on Tomcat I get the following exception: Initialization of metadata provider org.opensaml.saml2.metadata.provider.HTTPMetadataProvider@443c35d3 failed,…
Daniel
  • 119
  • 1
  • 1
  • 3