Questions tagged [saml-2.0]

Security Assertion Markup Language 2.0 (SAML 2.0) is a standard providing means to exchange authentication and authorization data between security domains. It is typically used to achieve cross-domain single sign-on (SSO) and creation of security tokens.

Filter by
Sorted by
Tagged with
-1 votes
0 answers
14 views

Multiple IDPs, same single sign on URL. IDP initiated SSO Springboot

we are facing an issue where in an IDP initiated SSO, we have a requirement to provide a common single sign on url to all the IDPs but with spring security latest version, the url should be {baseUrl}/...
Saumil Sharma's user avatar
0 votes
0 answers
6 views

Spring Security with ADFS saml2 - refresh claims or kickout users

I'm working on a Java application using Spring Security with Single Sign-On (SSO) authentication configured through ADFS Saml2, which retrieves user claims from Active Directory during login. As I ...
sebastian89n's user avatar
0 votes
0 answers
11 views

how to map attribute content in saml2 sso connection

I have a sso connection from a Azure idp to Keycloack sp. I can choose where to make it, but i need to make a mapping the content of an attribute of the SAML2 assertion. I have a "user....
JahStation's user avatar
-1 votes
1 answer
34 views

Spring security SAML : Which lib to create an Identity provider to connect to service provider

I want to create an identityprovider to authenticate to an sso server using Spring security saml2. Can I create an ID using the 'org.springframework.security:spring-security-saml2-service-provider' ...
user22993862's user avatar
0 votes
0 answers
28 views

Springboot3.0 Saml2 integrated with Microsoft Azure SAML SSO - issue when logout

My code is from this tutorial https://developer.okta.com/blog/2022/08/05/spring-boot-saml My Code: https://github.com/thangdc1910/springboot-saml i can integrate with Okta with no issue, but when i ...
victorDo's user avatar
-1 votes
0 answers
22 views

Authenticating SAML response received in AWS Lambda

I am implementing SAML protocol in JavaScript and I am using Microsoft as an IDP. I am able to send the SAML authentication request to the IDP by creating a login function which redirects it to the ...
Mohit Gupta's user avatar
0 votes
0 answers
22 views

Ger user info from SAML Entra ID

My application implements saml authentication and as IDP I am using Entra ID. But there are some usecases where I need to check if a IDP user account is enabled or not. I need to do it ...
xDTTOPs's user avatar
0 votes
0 answers
32 views

SAML2 authentication : xmlsec1 error xmlSecOpenSSLEvpSignatureVerify data do not match (Synapse/SAML2)

I've been struggling for several days to get SAML2 authentication to work between Matrix (Synapse) and Shibboleth. The problem seems to be at the xmlsec1 level which is called by pysaml2, when the IDP ...
Aurélien Grimpard's user avatar
0 votes
0 answers
35 views

Keycloak: Unique SAML endpoint per SAML Client in the same Realm

I'm setting up multiple SAML clients within a single Keycloak realm (Keycloak is the IdP). The idea is to have multiple SAML clients for the same SP within the same realm. SAML client 1 will be used ...
Mike-S122's user avatar
  • 189
1 vote
1 answer
86 views

SamlResponse passes third-party signature validation but fails ITfoxtec.Identity.Saml2 validation

I am using ITfoxtec.Identity.Saml2.MvcCore SAML2 SSO with an IBM commercial IdP server product. <SamlResponse> has a signed <Assertion> element, with no other signatures or encryption. SSO ...
user22958864's user avatar
0 votes
0 answers
16 views

ADFS IdP Initiated Logout Response URL

I am attempting to configure Single Logout (SLO) for one of my relying party trusts, but am having trouble getting IdP Initiated Logout (using the "Sign out from all the sites you have accessed&...
At Wits End's user avatar
0 votes
0 answers
29 views

OIDC - SAML2 integration

I need to integrate the oauth2 OIDC flow wit SAML flow. So I need to haver a client that starts an authentication code flow wiht spring authorization server. Spring authorization server should perform ...
user2097377's user avatar
0 votes
0 answers
24 views

Problem of settings in onelogin-saml-bundle for Azure connection in symfony 6 application [closed]

I am using onelogin-saml-bundle on symfony 6. With google, everything work fine. But I have an issue on Microsoft Azure. When my application launch the connection to azure, I receive the error ...
Marion's user avatar
  • 1
0 votes
0 answers
16 views

How to store IDP SAML2 metadata in database when using CAS (Central Authentication Server) as IDP

We are using CAS as IDP and using it for SAML2 authentication. We are currently using file system to store IDP SAML2 metadata. For security reasons we want to store it in database. We only want to ...
Vivek Agrawal's user avatar
0 votes
0 answers
45 views

How to implement SAML2.0 SSO in Windows forms C# Dot Net

I have to implement the SAML 2.0 SSO In windows forms but mostly suggestable for Web only but we can able to do by using embed the web Browser tool used in windows forms but redirect is not triggering....
suresh babu's user avatar
2 votes
1 answer
28 views

Parsing Same Key Multi Value SAML2 claims using ITfoxtec.Identity.Saml2

I am using the TestWebAppCore ITfoxtec project to create a sample SAML2 client application in ASP.NET Core. Using the template under the github repo listed above, I am able to retrieve claims and ...
Tim Lee's user avatar
  • 23
0 votes
1 answer
86 views

How to generate Identity Provider (IdP) SAML Response in node.js?

I have two very simple node.js applications: idp (Identity Provider) and sp (Service Provider). These apps don't have any specific business logic, I just want to create a very simple single sign-on (...
Mykyta Manuilenko's user avatar
0 votes
0 answers
16 views

How to set RelayState in SAML 2

Hi I am working on saml with the version 5.7.6 and wanted to set relay state. There is no setRelayStateResolver(this::resolveCustomRelayState) in OpenSaml4AuthenticationRequestResolver. resolve() ...
Vishal Kumar Singh's user avatar
0 votes
0 answers
17 views

Sustainsys.Saml2 -MVC Error "The signature verified correctly with the key contained in the signature, but that key is not trusted""

I have a Web MVC 4 Web application based on .net framework 4.8 that is using nuget "Sustainsys.Saml2" versión 1.0.0. After the user has logged in into the IDP login page and has been ...
BlueOceanMailDev's user avatar
0 votes
0 answers
28 views

Is it possible to have multiple SAML response url in one SAML SP metadata?

I am really new to SAML, but did read through tutorials (at least really tried). I am using samltest.id as IDP and my code will act like SP. On my local machine, it works as far as I can see(samltest'...
daxu's user avatar
  • 3,644
0 votes
1 answer
36 views

Unable to compute signature, Signature XMLObject does not have the XMLSignature created during marshalling,

I am not able to generate SAMLResponse, receiving errors; "Unable to compute signature, Signature XMLObject does not have the XMLSignature created during marshalling", "XMLObject does ...
Ali Azlan's user avatar
  • 117
0 votes
0 answers
19 views

Is there a way to implement SAML Shibboleth authentification in Flutter App?

I am currently working on a Flutter app for mobile (IOS and android) with firebase and I need to integrate SAML Shibboleth authentification. After many research I found that the flutter package for ...
Manu.K's user avatar
  • 1
0 votes
1 answer
55 views

Configuring Multiple Identity Providers (IDPs) for SAML Authentication in Spring 5

I've successfully implemented SAML-based Single Sign-On (SSO) using Spring 5 with the guidance provided in the tutorial https://isd-soft.com/tech_blog/diving-sso-spring-saml-ssocircle/. The ...
Abhishek Singh's user avatar
0 votes
0 answers
14 views

How to auto generate <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</md:NameIDFormat> in Shibboleth SSO login Metadata file

I have done all shibboleth related configuration at my server. After Shibboleth.sso/Status getting Ok Status and after Shibboleth.sso/Metadata, metadata file is downloading but tag is not present in ...
Rajkumar Shinde's user avatar
0 votes
1 answer
15 views

Passing initial query params all the way, in Spring Security OpenID/SAML

I have an OpenID and SAML integration using Spring Security. I'm using the service initiated flow. I would like to pass any query parameter that is present in the initial URL, all the way to the final ...
PentaKon's user avatar
  • 4,269
0 votes
0 answers
65 views

SAML error on subsequent requests related The response contained an InResponseTo attribute [] but no saved authentication request was found

I have implemented SAML and Okta integration for my spring boot application. It is a SP initiated flow. Everything was working fine until it got deployed on the server. Am getting this error "The ...
Summer07's user avatar
0 votes
1 answer
34 views

AWS VPN connection to private network works differently depending on seemingly external factors

context: AWS VPN to multiple accounts with saml authentication these two cases work fine: CASE aws vpn client on mac: it just works CASE aws vpn client on fedora linux (copr vorona/aws-rpm-packages) ...
user22806735's user avatar
0 votes
0 answers
116 views

How to configure Azure AD SSO SAML in Nextjs using NextAuth

I am looking for a way to implement Azure AD SSO using saml 2.0 using NextAuth. I have checked NextAuth provider list and I can find Azure AD is provided but it is only for open connect ID, not for ...
Kyaw Soe Hein's user avatar
0 votes
0 answers
31 views

Send the attributes received from SAML assertion to a different application

I created a spring boot app with SAML2.0 integration with Okta as the IDP. Am able to successfully authenticate using okta and am getting back the required attributes from SAML assertion. Am using SP ...
Summer07's user avatar
1 vote
0 answers
56 views

SAML SSO authentication using Spring Boot 3 and ADFS

I'm looking for a working example of SAML 2.0 SSO Authentication using Spring boot 3 and ADFS as IDP in non cloud environment. I Went through many samples and tutorials but to be honest most of them ...
Learn2Dev's user avatar
0 votes
1 answer
38 views

Integrating IdentityServer4 with SuiteCRM for SSO Using SAML2 Protocol

I am currently working on a project that involves IdentityServer4 for implementing authentication and authorization services. My IdentityServer is set up to use the OpenID Connect (OIDC) protocol, and ...
Bassam's user avatar
  • 1
0 votes
0 answers
31 views

Implementing Single Logout (SLO) with Sustainsys.Saml2 in ASP.NET MVC

I'm working on an ASP.NET MVC application that uses the Sustainsys.Saml2.Owin library for SAML 2.0 Single Sign-On (SSO) with Salesforce as the Identity Provider (IdP). SSO is working fine, but now I ...
Shahab khan's user avatar
0 votes
0 answers
27 views

How to generate <ds:DigestValue> and <ds:SignatureValue> using java SAML2.0

I am trying to secure my java web application using Keycloak SAML authentication but somehow when I am trying to generate the AuthnRequest it is not passing <ds:DigestValue> and <ds:...
user3458271's user avatar
0 votes
0 answers
29 views

Keycloak Saml adding Signature algorithm not working

I am trying to secure my web application using Keycloak saml but while adding Signature it is not working and giving below error: exception [org.opensaml.ws.message.encoder.MessageEncodingException: ...
user3458271's user avatar
0 votes
1 answer
22 views

Custom attribute in response from SAML

I use SAML ( Ws-Fed ) to authenticate the user via an IdP. I make my AuthnRequest and I correctly receive a response. In this response I got 4 attributes ( Id, FirstName, LastName, Email ). I need to ...
Abyssian's user avatar
0 votes
0 answers
15 views

What does SAML error code 101 means in ManageEngine Service Desk Plus?

I am integrating my Keycloak application as a IDP for ManageEngine Service Desk Plus using SAML certification, Ive configured it using the metadata file generated by the ManageEngine Client, ive ...
The Doctor's user avatar
1 vote
0 answers
45 views

Fetch a custom attribute from uri's query params in a keycloak mapper and bind it to saml assertion

I want to pass a custom dynamic attribute say custom_parameter=your-parameter-value in login uri : https://keycloak-server/realms/your-realm/protocol/openid-connect/auth?client_id=your-client-id&...
Vivian's user avatar
  • 11
0 votes
1 answer
68 views

simpleSAMLphp UNHANDLEDEXCEPTION with testing SP

Im not experienced with simpleSAMLphp or SAML in general. I apologize for misconceptions in advance. I'm seeing following debug information trying to test my SP configuration (to connect to a remote ...
MoodyA1's user avatar
  • 13
0 votes
1 answer
55 views

System.Security.Cryptography.CryptographicException: Invalid provider type specified. Problem with recreating and importing the .pfx

I'm experiencing a known issue when installing a certificate on a Windows Server 2016, resulting in the following exception: System.Security.Cryptography.CryptographicException: Invalid provider type ...
goldflue's user avatar
0 votes
0 answers
63 views

Keycloak: How do I automatically import AD groups when using Identity Brokering

I am making some changes on SAML IDP (ADFS) configuration in Keycloak. For this configuration users are registered into Keycloak using First login flow. Currently First Flow login imports only basic ...
Golide's user avatar
  • 905
0 votes
1 answer
121 views

Add Azure B2C tenant as an Identity Provider for Azure AD

I have an application connected to an Azure B2C tenant that hosts external customers and this B2C tenant has Azure AD as an identity provider. Users see the B2C sign in page and a button to allow ...
Haitham Shaddad's user avatar
0 votes
0 answers
64 views

Secure Java we application using Azure AD SAML but do not want to use spring boot

I have create java application but I need to secure it using Azure AD SAML using spring boot I have done it but when I am trying to convert it for without spring boot it is not working. My code is ...
user3458271's user avatar
0 votes
1 answer
39 views

how to set ForceAuthentication value during the runtime using Sustainsys Saml2AuthenticationRequest

We register AuthenticationScheme and SAML2Options in startup.cs (.net6 project). During the registration, we set ForceAuthentication = false because the IDP we integrate with has a different login ...
roczstar's user avatar
0 votes
0 answers
42 views

Facing Status code 401 in supabase okta authentication with next.js

i manage OKTA SSO Authentcation using supabase in a Next.js App Problem: When i successfully sso Sign in i got access token as fragment identifier localhost:3000/#accessToken=xyz i got in the console ...
Youssef Hlem's user avatar
0 votes
0 answers
29 views

Issue to obtain SAMLResponse in a .NET FRAMEWORK application (SHIBBOLETH linked)

I have an ASP .net Framework web app, run on IIS, which uses SAML authentication through Shibboleth. Thanks to Chrome dev tools I see that something tagged as POST is received and the Token I need is ...
CAMBORIO's user avatar
0 votes
0 answers
37 views

How to support SAML SSO within a chrome extension?

I'm trying to add SAML v2 SSO within my google chrome extension as the service provider, but I've been running into a series of problems with this. What are the available options for integrating SAML ...
Alex Marich's user avatar
0 votes
0 answers
48 views

pysaml2 microsoft entra ID Failure reason: KEY-NOT-FOUND Error: failed to verify file

I have created and enterprise application in azure portal and did the setup as below And below is my code in python acs_url = 'http://localhost:8000/user/login/sso/auth' rv = requests.get("...
Mohamad Fadil's user avatar
0 votes
0 answers
54 views

Keycloak after login gets in loop

I am securing my java application using Keycloak saml for that I am using SamlFilter but after successful login it is just continuous redirecting it again and again in loop. My keycloak-saml.xml file: ...
user3458271's user avatar
0 votes
0 answers
39 views

Secure Java application using Keycloak saml

I am trying to secure my java application using Keycloak security for the I have added all the kecycloak saml dependency. In web.xml I have added below config: <filter> <filter-name>...
user3458271's user avatar
0 votes
0 answers
106 views

SAML Response - How to verify the signature inside it?

I want to verify a SAML Response created by Azure AD. The response looks like this: <samlp:Response ID="_188301aa-efa1-405f-ad6d-cf0ae65e347b" Version="2.0" IssueInstant="...
matan__2's user avatar

1
2 3 4 5
61