Questions tagged [saml-2.0]

Security Assertion Markup Language 2.0 (SAML 2.0) is a standard providing means to exchange authentication and authorization data between security domains. It is typically used to achieve cross-domain single sign-on (SSO) and creation of security tokens.

Security Assertion Markup Language () is an -based open standard for exchanging authentication and authorization data between security domains, that is, between an identity provider (a producer of assertions) and a service provider (a consumer of assertions). is a product of the Security Services Technical Committee.

SAML version 2 () adds digital signatures and resolves back into the SAML standard enhancements made to the SAML 1.1 () specification by other systems (for instance Shibboleth and WS-federation).

SAML 2.0 is significantly different from SAML 1.1 and is not backwards compatible, although many systems can handle both.

Questions should have this tag when they are specifically related to SAML 2.0, more general SAML questions should have the less specific tag instead.

3007 questions
1
vote
1 answer

Decryption of SAML authenticaion response failed

I have problem with decryption of the received authentication response SAML message. My app is connected with two IdP's of different types. Frist is ForgeRocks, OpenAM and second Microsoft's ADFS server. Both IdPs were provided with same service…
Rastko
  • 890
  • 1
  • 17
  • 32
1
vote
0 answers

How do I limit an SAML IDP to a certain group of users in django?

I'm trying to get my head around some SAML concepts. We are implementing SAML support in our django-based SaaS. According to my understanding, I have to implement a SAML Service Provider. There are ways to do this using, eg djangosaml2. Using…
Jens Alm
  • 3,027
  • 4
  • 22
  • 24
1
vote
1 answer

WSO2 Identity Server fails to perform authentication SAML2.0 when consumer URL inaccessible

WSO2 Identity Server fails to perform authentication SAML2.0 consumer URL not reachable We are using WSO2 Identity Server 4.6.0 for SAML 2.0 based Single Sign-On. The authentication was working fine when the Assertion Consumer URL of the service…
JSL
  • 11
  • 4
1
vote
1 answer

Spring WS Security WSS4J with SAML from WSO2

Earlier I was in assumption that, WSS4J is not compatible with SAML, but as I see this http://jaminhitchcock.blogspot.in/2014/05/creating-and-validating-saml-assertions.html , I hope to give a try. But I want to use a Identity Provider(WSO2) to…
Chakradhar K
  • 501
  • 13
  • 40
1
vote
1 answer

Validate signed assertion embedded in SAMLResponse

I work with OpenSaml library, I want to validate signed assertion (XML Signature) embedded in SAMLResponse that is not signed. Always the validation fail, there are a way to validate the signed assertion without his parent (Response) ? Or, another…
nouri
  • 23
  • 6
1
vote
2 answers

How can we change Openam encryption algorithm for assertion of SAML2?

I know that we can encrypt the assertion, nameID and attribute in openam. Check following link to know how. OpenAM Configured SAML Response Encryption But by default openam encrypts using AES-128.
vmeghani
  • 85
  • 11
1
vote
1 answer

SimpleSAML and Symantec O3

I'm trying to configure SimpleSAML to allow authentication via an external login portal powered by Symantec O3. I've set up SimpleSAML as a SP by editing config/authsources.php and converting the respectful meta data. I've provided my meta data to…
1
vote
2 answers

sso saml with weblogic and openam

I'm trying to setup saml sso with openam and weblogic. The reason why I want to use saml is that I have multiple application where I can't change the web.xml to use the j2ee agent. My question is if there is a good document explaining the setup…
user3640883
  • 53
  • 1
  • 7
1
vote
2 answers

Can OIOSAML run as SAML SP in an Azure Website?

We are trying to run OIOSAML as an SAML SP in an Azure Website, but we encounter problems regarding the signing certificates. Azure websites will not allow us to install custom certificates, hence our SigningCertificate under the Federation node in…
Audun
  • 61
  • 7
1
vote
1 answer

Single Logout Profile

I am sending a LogoutRequest from SP initiated SLO to IdP. Ping is used as Identity Provider and on Ping I am getting the error which says "Signature Required" while there is a signature in the LogoutRequest. So I found on some research that if…
yogsma
  • 10,142
  • 31
  • 97
  • 154
1
vote
1 answer

Unable to lookup idp connection metadata for entityid='http://sp.example.com/sp'

I have service provider application http://sp.example.com/sp and when user accesses it through a browser, user is redirected from my SP application to IdP server which is configured on PingFederate server with an SP…
yogsma
  • 10,142
  • 31
  • 97
  • 154
1
vote
1 answer

Spring SAML credentials and platform accounts

I was able to integrate Spring Boot and Spring Security SAML by using the @ImportResource annotation. Now, I'd like to go on as follows: the user selects an IdP [DONE]. it performs the login (successful) [DONE]. the SP obtains user data (by parsing…
vdenotaris
  • 13,297
  • 26
  • 81
  • 132
1
vote
3 answers

Claims and SAML2 confusion

My understanding is that claims are an STS thing based on WS-trust standard and nothing to do with SAML2 standard. WS-trust STS token can use SAML to send claims in that format. Am I correct?
1
vote
1 answer

How to request IDP to send me additional custom attributes in the AuthnResponse?

I've implemented SSO using spring SAML and I'm wondering is there any way to request the IDP(ssocircle.com in my case) to send me additional attributes along with nameID which it is already sending. Lets say I want the IdP to send me the accountID…
abhilash
  • 785
  • 1
  • 10
  • 19
1
vote
1 answer

Get logged in user information in SAML Single Sign On google app engine

I am trying to get the user who is logged in via. SAML Single Sign On. I have already implemented SAML Single Sign On and it works. The code I use for programmatic login is : apps = gdata.apps.service.AppsService(email=username, domain=domain,…
Kartik Domadiya
  • 29,868
  • 19
  • 93
  • 104