Questions tagged [spring-saml]

Spring Security SAML Extension enables seamless inclusion of SAML 2.0 Service Provider capabilities in Spring applications.

Spring Security SAML Extension enables integration of Spring applications with all SAML 2.0 Identity Provider products such as ADFS 2.0, Shibboleth, OpenAM/OpenSSO, Ping Federate and Okta.

Official Website: http://projects.spring.io/spring-security-saml/

Useful links:

753 questions
5
votes
1 answer

"Signature did not validate against the credential's key" with Junos as IdP

I've implemented SSO using Spring SAML and everything is working fine for an interaction with idp.ssocircle.com. Now I am trying to use another identity provider. I have downloaded the metadata of the IdP and have linked it in my spring XML config.…
nocheinAndi
  • 63
  • 1
  • 1
  • 7
5
votes
1 answer

How to Check whether a valid session is still existing at IDP?

I've implemented SSO using Spring Security SAML. Here is what currently working for me: When I try to access any resource at SP, I'm redirected to my IdP(idp.ssocircle.com in my case) if I'm not logged in already. After successful authentication at…
abhilash
  • 785
  • 1
  • 10
  • 19
5
votes
1 answer

SAML service provider spring security

When using pre-configured service provider metadata, in spring security, should there be 2 beans definitions for extended metadata delegate ? one for IDP metadata, and one for SP metadata ?
user3280968
  • 181
  • 1
  • 8
5
votes
3 answers

Configure POST ProtocolBinding in Spring Security SAML authentication request

Spring Security SAML insists on requesting the Artifact binding in the SAML authentication request (ProtocolBinding attribute):
devkat
  • 1,624
  • 14
  • 15
4
votes
1 answer

How do you disable the auto generated pages /login and /logout using Spring SAML2?

I am using Spring Boot - 2.6.6 and Spring Security - 5.7.0-M2 with the spring-security-saml2-service-provider library to create a SAML service provider application. I followed Spring's sample project Spring Security SAML2 Sample so my setup looks…
4
votes
1 answer

Howto disable signature verification in Spring Security SAML 5.6.1?

I'm currently migrating from old deprecated Spring Security SAML Extension 1.0.10 to the SAML implementation in Spring Security 5.6.1. In the old extension there was the possibility to disable the signature verification of the SAML response…
4
votes
1 answer

Opensaml unmarshallMessage giving opensaml local part cannot be "null" when creating a QName Exception

I am using Spring SAML, from IDP response I am receiving issuer as an attribute ID, So I wanted to change the response after receiving in spring saml, so I have overridden method unmarshall which will parse the message and changed the xml elements…
ashok
  • 1,078
  • 3
  • 20
  • 63
4
votes
1 answer

Unable to change default "reply Url" (assertion consumer service Location) in Spring security SAML SSO

I am using spring security Saml 2.0 with spring boot for SSO (Single sign on) with azure as Identity provider. Spring security uses "{baseUrl}/login/saml2/sso/{registrationId}" as a default "Reply Url", but I want to use…
4
votes
0 answers

How to define a custom grant type in a Spring Security Oauth2 client?

I have a working api-gateway application built on spring-boot 2.2, which is an Oauth2 client supporting authorization-code grant flow. It is built using spring-boot @EnableOAuth2Sso, which will create a spring session and oauth2 context once the…
4
votes
1 answer

spring-security saml2 : How to obtain the current user?

I'm working with spring-security and spring-security-saml2-service-provider with versions 5.2.0.RELEASE. I'm trying after authentication by IDP to obtain the current Assertion in order to map it to a user in our local system. I use this code to…
4
votes
1 answer

How to send current URL as relay state while sending authentication request to IDP

While implementing SAML based authentication for one of our applications, i came across a requirement where we need to restore the user's session after authentication by IdP (Identity Provider). Consider the following scenario - User tries to open…
Ankit Rustagi
  • 5,539
  • 12
  • 39
  • 70
4
votes
1 answer

Spring SAML: SAMLException: Unsupported request

I am getting Caused by: org.opensaml.common.SAMLException: Unsupported request at org.springframework.security.saml.processor.SAMLProcessorImpl.getBinding(SAMLProcessorImpl.java:265)…
Hutsul
  • 1,535
  • 4
  • 31
  • 51
4
votes
0 answers

Handle multiple SP metadata generators in SAML

I have SP initiated SAML 2.0 + SPRING boot application working behind the Load balancer. The load balancer end point (http://myserver.biz) is configured as entityBaseUrl for the application as …
4
votes
2 answers

Can't import springframework.security.extensions and find saml() method

org.springframework.security.extensions.saml2.config.SAMLConfigurer does not exist At least i can't import org.springframework.security.extensions.saml2.config.SAMLConfigurer in my Security Configuration class the method saml() has not been…
Artem Fedotov
  • 432
  • 1
  • 6
  • 21
4
votes
4 answers

SSL peer failed hostname validation in Spring SAML

I'm trying to configure my Spring Boot project to use SAML authentication against a third party IDP. I've already achieved to make the configuration from vdenotaris work with the SSOCircle provider and now I want to switch it to the other provider.…
Aritz
  • 30,971
  • 16
  • 136
  • 217