Questions tagged [spring-saml]

Spring Security SAML Extension enables seamless inclusion of SAML 2.0 Service Provider capabilities in Spring applications.

Spring Security SAML Extension enables integration of Spring applications with all SAML 2.0 Identity Provider products such as ADFS 2.0, Shibboleth, OpenAM/OpenSSO, Ping Federate and Okta.

Official Website: http://projects.spring.io/spring-security-saml/

Useful links:

753 questions
4
votes
1 answer

spring-saml IDPSSODescriptor wasn't found after time

I have a system that works, but after certain period of time I have this kind of problem: 2017-08-31 15:31:00 ERROR UT005023: Exception handling request to /spring-security-saml2-sample/saml/login: javax.servlet.ServletException:…
4
votes
1 answer

MaxAuthenticationAge in WebSSOProfileConsumerImpl

What is the use of WebSSOProfileConsumerImpl.setMaxAuthenticationAge in spring security. Do I need to set its value explicitly?…
bigb
  • 51
  • 1
  • 7
4
votes
1 answer

Explicit SAML attributes in Spring Saml

Is there a way to explicitly say to the IDP which attributes I am expecting? I guess the answer is yes, but I could not find examples. Would I need to specify "something" in the SP metadata? Has someone been able to extend the Spring SAML…
nuvio
  • 2,555
  • 4
  • 32
  • 58
4
votes
1 answer

Spring SAML - support for customized SAML Assertion

We have a product that has one customer and we implemented SAML flow for this customer using Spring Security SAML when we act as the service provider and the idp is in the customer side. Now we have another customer that also want the authentication…
ilay zeidman
  • 2,654
  • 5
  • 23
  • 45
4
votes
2 answers

Stateless Sessions with Spring Security Saml and SP Application

I tried to run the boot sample spring security saml boot from, https://github.com/vdenotaris/spring-boot-security-saml-sample I am able to run it and integrate with identity provider. But, I see that a session is created every time and remains…
bstechie
  • 85
  • 1
  • 8
4
votes
0 answers

OpenSAML dependencies in spring-security-saml

spring-saml uses OpenSAML: spring-security-saml 1.0.1 references to an older opensaml version. Is it a good idea to upgrade to the most current version (2.6.6)? OpenSAML V2 will not supported soon. Does this affect spring-security-saml? Will there…
Matthias M
  • 12,906
  • 17
  • 87
  • 116
4
votes
0 answers

Spring SAML multi-tenancy and entity alias

If possible if I want to deploy only one web app which is my Service Provider but can do the SSO by multiple domain (multiple SP but the same IDP)? I mean that my Service Provider will have 2 SP metadata and each of them have a different domain.…
Binh Le
  • 81
  • 5
4
votes
0 answers

How to implement a MetadataProvider that reads from database

I'm adding SSO support to a spring-based application using the spring-security-saml extension. The idea will be that an IDP can register to use SSO with my application by filling out a form in the UI, specifying their entityId, SSO authentication…
JCoster22
  • 387
  • 5
  • 9
4
votes
1 answer

Integrating Spring SAML as SP and SimpleSAMLphp as IdP (HoK profile)

I am trying to get HoK profile work with Spring SAML as the SP and SimpleSAMLphp as the IdP. The SP gets the client certificate and then sends the following authentication request to the IdP without problem:
4
votes
2 answers

Spring Security XML configuration and Spring SAML in Java configuration

I am using Spring Security in one of my project and now want to introduce Spring SAML. I have used Spring's XML configuration so far. Can I integrate SAML using Java based configuration? I am new to SAML integration.
Amit
  • 13,134
  • 17
  • 77
  • 148
4
votes
2 answers

Spring Saml not working with latest Spring Security 4.0.0.RELEASE

I upgraded Spring Security from 3.2.5.RELEASE to 4.0.0.RELEASE and I'm getting the following error javax.servlet.ServletException: Filter execution threw an exception at…
kayoubi
  • 85
  • 1
  • 8
4
votes
1 answer

Getting authentication object is null even after successfully login by IDP using SAML

I have configured spring-saml and spring security in my application. I have given different url pattern to recognize request. if I append /rest in app URL then it will create spring-security context with basic authentication. If I append /saml in…
ManojP
  • 6,113
  • 2
  • 37
  • 49
4
votes
1 answer

Add request parameter to SAML request using Spring Security SAML

I need to add a request parameter (e.g. locale=en) to the SAML request in order to let the login page display correct language. How do I do that? I tried to add the attribute to the HttpServletRequest sent as an argument to the commence method…
4
votes
3 answers

How to do something after the login with Spring Security?

I have a Spring web application which uses Spring SAML and Spring Security to manage the login process. Now I need to do some tasks after the correct login occurs. In particular I have to store some data in the SecurityContext.getContext()…
gvdm
  • 3,006
  • 5
  • 35
  • 73
4
votes
1 answer

Do we need Keystore/JKSKeyManager in IDP initiated SSO (SAML)?

I've successfully implemented SSO authentication using Spring-SAML extension. Primary requirement for us to support IDP-initiated SSO to our application. Well, by using the configurations from spring-security-saml2-sample even SP-initiated SSO flow…
kotacc
  • 327
  • 2
  • 12