Questions tagged [spring-saml]

Spring Security SAML Extension enables seamless inclusion of SAML 2.0 Service Provider capabilities in Spring applications.

Spring Security SAML Extension enables integration of Spring applications with all SAML 2.0 Identity Provider products such as ADFS 2.0, Shibboleth, OpenAM/OpenSSO, Ping Federate and Okta.

Official Website: http://projects.spring.io/spring-security-saml/

Useful links:

753 questions
4
votes
2 answers

How to configuration of IDP metadata and SP metadata in Spring Security SAML sample?

I want to deal with Spring Security SAML. For this, I start to explore Spring Security SAML. At the beginning, I create an account at SSOCircle. Than I configurated of IDP metadata and generation of SP metadata (4.2.2 and 4.2.3). At entityId I…
somebody
  • 1,077
  • 5
  • 14
  • 32
4
votes
1 answer

Behaviour of SAML when HTTP Server used for high availability

I have implemented the supporting of SAML SSO to have my application act as the Service Provider using Spring Security SAML Extension. I was able to integrate my SP with different IDPs. So for example I have HostA,HostB, and HostC, all these have…
4
votes
1 answer

SAML and Java Standalone application without browser?

I am testing SSO with SP (Spring-SAML) and IDP (WSO2IS). They are working fine on browser. Now I want to bring it to a Java standalone application. Providing user credentials and SP URL, then a user can log in the application and access SP. To…
Rocherlee
  • 2,536
  • 1
  • 20
  • 27
4
votes
1 answer

Spring saml, second local SP - entity alias and context provider

I have system with two loadbalancer exposing application for separate networks. In application spring-saml extension is used for authentication with IdP (one visible from both networks). For first location all working as expected - default SP with…
Dariusz Skrudlik
  • 509
  • 7
  • 16
4
votes
1 answer

Spring SAML Security - Multiple IDP Metadata configuration for two different ADFS server

Is that possible to have multiple IDP Metadata configuration? How do I configure it? In my environment I have two different ADFS servers and both has its own Metadata.xml files. In the securityContext.xml file I have following configuration for my…
Kannan
  • 87
  • 3
  • 8
4
votes
1 answer

Spring Security SAML trusted certificate entries are not password-protected

I'm integrating the spring-saml2-sample app into my own application. My Service Provider connects to a Shibboleth IDP. I'm testing the SP with the private certificate provided in samlKeystore.jks that came with the Spring Security SAML application.…
user3754289
  • 89
  • 1
  • 7
4
votes
1 answer

Issues Importing SP Metadata to SSOCircle Spring Security SAML Extention

I'm running the Spring Security SAML Extension sample program and I'm able to generate the Service Provider metadata. However, when I try to import the SP metadata to SSOCircle, I get the following error: Meta Data Import Your data could not be…
NuAlphaMan
  • 713
  • 4
  • 12
  • 25
4
votes
1 answer

Spring SAML - how to add custom fields on the SP HTTP request?

My service provider uses HTTP-Post binding to send the request to the IDP. I need to add new fields to the form. Right now I'm sending the "SAMLRequest" and "RelayState", but I also need to send "option" and "profile", these are fields required by…
user3754289
  • 89
  • 1
  • 7
4
votes
3 answers

Spring SAML on Weblogic 12c

I'm currently working on an application that is making use of the Spring SAML (http://projects.spring.io/spring-security-saml/) project as part of our authentication. I know it is still in RC but so is the application we are working on. We have the…
4
votes
1 answer

Can I use SAML with another authentication provider in a single web application

I have a Spring application already using Spring security with a local store of users. I want to also allow an IDP login via SAML assertion, but only for people who already have an account with my application. 1) Can I configure spring security to…
Tom
  • 61
  • 3
4
votes
1 answer

Spring SAML pre auth check at IDP

I am writing several web applications based on both spring security and the spring security saml extension (RC2). I have single sign on working with multiple service providers and an Identity provider in a basic fashion (based off the example…
Paul H
  • 41
  • 2
4
votes
1 answer

Configuring Spring SAML for SSO with PingFederate

We have decided to use Ping Federate to be our SSO solution. I have searched many examples but have not found a spring configuration that clearly describes how I need to set up my SP and/or IdP on the PingFederate side. I have not found a Spring…
4
votes
1 answer

configuring saml-sample (SP) to work with Okta (IdP)

Okta is an IdP for SAML logins. I have a super-admin user of Okta. I try to use Spring's saml-sample project as my SP (service-provider). When I configure it (spring-saml-sample) in the Okta system, I need to supply some data on my SP, such as "post…
OhadR
  • 8,276
  • 3
  • 47
  • 53
3
votes
1 answer

Spring Saml2 and Spring Session - SavedRequest not retrieved (cannot redirect to requested page after authentication / InResponseTo exception)

I am trying to use Spring Boot SAML2 + Spring Session to secure my web application (to be deployed on K8S). Everything is fine without spring-session-data-rest or spring-session-hazelcast. It can authenticate with Okta and redirect back to the…
3
votes
1 answer

SAML2 Authentication with authorization based on SAML assertions

I'm using spring-security-saml2-service-provider to authenticate my SpringBoot webapp against a SAML IdP - this works. I can also access the SAML assertions within a REST Controller using @AuthenticationPrincipal Saml2AuthenticatedPrincipal…
Jim ReesPotter
  • 445
  • 1
  • 3
  • 10