Stack Overflow
Stack Overflow

Questions tagged [spring-security-saml2]

104 questions
4
votes
1 answer

java.lang.ClassCastException: org.opensaml.core.xml.schema.impl.XSAnyBuilder cannot be cast to org.opensaml.xml.XMLObjectBuilder

In our application, we are trying to upgrade to Spring boot 2, We are using spring-security-saml2-core:1.0.4.RELEASE, while running application we are getting following exception. It seems, there are two jars xmltooling-1.4.6 and…
pankiba
  • 235
  • 1
  • 5
  • 12
3
votes
1 answer

Spring Saml2 and Spring Session - SavedRequest not retrieved (cannot redirect to requested page after authentication / InResponseTo exception)

I am trying to use Spring Boot SAML2 + Spring Session to secure my web application (to be deployed on K8S). Everything is fine without spring-session-data-rest or spring-session-hazelcast. It can authenticate with Okta and redirect back to the…
Simon Wong
  • 48
  • 3
3
votes
1 answer

Spring Security SAML2 Using G Suite as Idp

I'm trying to use Spring Security (5.3.3.RELEASE) to handle SAML2 authentication in a Spring Boot application. The Spring Boot app with be the SP and G Suite will be the IDP. In my Maven pom.xml file I have: …
Adam
  • 43,763
  • 16
  • 104
  • 144
3
votes
1 answer

Spring Security SAML2 (NOT the SAML Extension) - Authentication Validation Exception due to mismatch of HttpServerRequest URL and Destination URL

OpenSamlAuthenticationProvider.validateSaml2Response auth exception shown below due to mismatch in HttpServletRequest URL and Destination URL in the IDP: if (StringUtils.hasText(samlResponse.getDestination()) &&…
neal
  • 31
  • 2
3
votes
1 answer

How to dynamically load Identity Provider (IdP) from Database at runtime Sprint Security SAML

Is there a way to add a new IdP at runtime from database while using Spring Security Extension for SAML 2.0 how to add new Identity Provider into Java Web application by taking required attributes from User at runtime without restarting the server…
Ashish Singh
  • 127
  • 7
2
votes
1 answer

Spring boot and Okta SAML2

I like the idea of using spring-security-saml2-service-provider - from of docs: https://docs.spring.io/spring-security/reference/5.6.0-RC1/servlet/saml2/index.html Instead of spring-security-saml2-core it looks way less boilerplate, but I catch 400…
tarmogoyf
  • 298
  • 3
  • 17
2
votes
0 answers

Spring Security SAML User log as Anonymous but SAMLUserDetailsService not call

I'm using Spring Security 4.2.20.RELEASE and spring-security-saml2-core 1.0.10.RELEASE. My application is an JSF and XML configurated application. I already code a connection to an IDP and it works well (since 3 years), but I try to connect to an…
Benoît
  • 41
  • 5
2
votes
0 answers

How use JKS Keystore in the Spring Security SAML2 context

I am in the middle of transferring an old SAML implementation that was written using the Spring Security SAML Extension into the the Spring Security SAML2. I have difficulties with the following bean: