Questions tagged [spring-saml]
Spring Security SAML Extension enables seamless inclusion of SAML 2.0 Service Provider capabilities in Spring applications.
757
questions
0
votes
0
answers
9
views
Using jdbcauthentication and saml2 authentication in Spring boot
I am developing a Spring boot web application. I want to use SSO with SAML2 firstly. After user authenticate successfully with saml2, I want to use jdbcauthentication to check if the email address ...
0
votes
0
answers
21
views
Springboot keycloak SAML Failed to resolve any signing credential
Im working on integrating keycloak SAML with a springboot 3 application.
Its a simple rest application with one end-point.
when call the API it does not get redirected to the keycloak login, instead I ...
0
votes
0
answers
66
views
How to integrate Spring Boot 3 with Keycloak SAML?
Im working on Spring Boot 3 migration.
I had Keycloak SAML working on Spring Boot 2.7.x.
I had follwed https://www.codecentric.de/wissens-hub/blog/secure-spring-boot-app-saml-keycloak for the ...
0
votes
1
answer
118
views
authenticationManger method not present in spring security 6, Saml Config migration
We are migrating our springboot application to springboot 3.x. In the latest version of springboot, i see the spring-security upgraded to version 6.
In this version WebSecurityConfigurerAdapter is ...
0
votes
0
answers
32
views
Spring SAML2 integrate with Azure
I created a project with spring SAML2, i'm trying to integrate it with Azure AD, now single sign on flow looks pretty good, but single logout is not work properly.
I debugged the spring SAML2 ...
0
votes
0
answers
46
views
Cors error with post /logout with _csrf token while triggering Single Llogout in IDP
I am using SimpleSamlPHP 2.x as an Identity Provider (IDP) along with Spring Boot 2.7. My Spring SAML Security (spring-security-saml2-service-provider) version is 5.7.5 (recently updated).
Currently, ...
0
votes
1
answer
56
views
Error `The InResponseTo attribute [ARQ...] does not match the ID of the authentication request [ARQ...]` after upgrading Spring boot 2.6 -> 2.7
Context and issue
We are at Spring Boot 2.6 and use simpleSamlPhp 1.18.8 as a local idp server running in Docker, accessible through host.docker.internal for our test/develop environment. The ...
1
vote
0
answers
30
views
How to integrate saml to your springboot application with jumpcloud as the idp
We would like to add one of our internal apps to jumpcloud (we use jumpcloud as our exisiting IDP to login to different services like MS-Office). now to add the internal app to it I firstly am doing a ...
1
vote
1
answer
161
views
Implementing multiple customizable URLs for single sign-on with federated IdP in Spring Security SAML2
Our application's single sign-on works with a federated identity provider (IdP) where the IdP selection is based on query parameters or path variables, such as https://:/my-application/idplogin?...
0
votes
1
answer
404
views
How to execute a filter or handler only once after successful SAML2 login?
I am using Spring Security with SAML2 service provider and have a requirement to set custom tokens as part of cookies in the response after a successful SAML2 login.I have created a filter SetToken ...
0
votes
0
answers
127
views
SAML integration is breaking after upgrading to spring boot 3.0.6
I have integrated SAML with Spring Security, and recently upgraded to spring 3.0.6. After upgrading the SAML integration is broken. Below is the problem description.
After successful authentication, ...
0
votes
0
answers
38
views
How can I load SAML config files stored in S3 bucket in Spring Boot application using spring-security-saml2-core?
I have an spring boot application in which i have integrated with spring-security-saml2-core for sso authetication and i am trying to put the identity provider xml config files externally.
I have ...
0
votes
0
answers
27
views
How can I construct an extended metadata for a service provider?
I have tried constructing a standard metadata which includes details regarding ACS url,Entity ID,authnRequest needs to be signed,nameid format,acs binding.
But I also need to construct an extended ...
0
votes
0
answers
538
views
Azure SAML SSO with spring boot using SAML2-core 2.0.0.M31 dependency
Below code works if i add any user to this azure ad application. But i am not able to give access based on group. If any any user is added in particular group then only it shoule be given access. As ...
0
votes
1
answer
603
views
ESAPI-java.lang.ClassNotFoundException: org.owasp.esapi.reference.JavaLogFactory
Iam currently using esapi 2.2.0.0 version. When i tried to upgrade 2.2.0.0 to 2.5.2.0 iam getting this error..java.lang.ClassNotFoundException: org.owasp.esapi.reference.JavaLogFactory LogFactory ...
0
votes
0
answers
20
views
SAML issuer field does not get my custom value
I am new to SAML but what I want to do is to change the Issuer in the authrequest of the SAML request.
What I did is to go to the documentation of SpringBoot and follow the instructions and I found ...
0
votes
0
answers
13
views
In firfox 91.4.0esr (64-bit) version entered url is triggers one more time in background after sometime
In firefox 91.4.0esr (64-bit) I am trying to access angular app url like <appbaseurl>/app?token=test which checks cookie in browser if session not exists it calls spring saml url <...
0
votes
0
answers
158
views
Spring boot login page for both SAML and form based authentication
I am trying to integrate saml in my spring boot application.
I have no problem to get form based authentication working and saml authentication working but when I try to get both on same application I ...
0
votes
1
answer
248
views
Spring-boot-starter-upgrade-3.0 SAML sso issues
Problem :
Initially we wrote spring boot app using spring-boot-starter-parent version - 2.0.5.RELEASE. As part of the
app we need SAML SSO so we used spring-security-saml2-core with the version - 1.0....
1
vote
1
answer
589
views
spring security 6: saml integration: redirection, registrationId
As I want to update my app to spring boot 3 and implementing the WebSecurityConfigurerAdapter does not work anymore, I try now to use the official spring boot security for my saml integration. I am ...
0
votes
1
answer
92
views
How to configure grails-spring-security-saml plugin version 5.0.0-RC3 for https applications
I am upgrading my Grails4 application to Grails5 and am trying to upgrade the grails-spring-security-saml plugin from version 4.0.2 to version 5.0.0-RC3.
I am using Okta as my identity provider and if ...
0
votes
0
answers
331
views
How to perform IDP initated login in keycloak saml
I have a spring boot application that is integrated to keycloak saml using the spring saml extension.
here is my security config class
@Configuration
@EnableWebSecurity
@EnableGlobalMethodSecurity(...
1
vote
0
answers
328
views
Troubles configuring SAML authentication using reverse proxy
I've developed a small Java application as Service Provider to test the SAML authentication.
The archtecture is: front-end managed by apache (for Angular FE but now is not important) exposed on port ...
1
vote
1
answer
398
views
Spring SAML 2.0 extention does not use the public certificate imported in the keystore.jks
I am new to saml 2.0. I'm trying to understand the saml 2.0 springboot extension. I came across the sample app by Vincenzo De Notaris and Thomas Darimont.
Here is the git hub sample: https://github....
0
votes
0
answers
214
views
In SAML's AuthnRequest, how to make the AssertionConsumerServiceURL a HTTPS url?
When you access the relying party's url, you are redirected to the asserting party. I see in SAML-tracer:
<saml2p:AuthnRequest xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"
...
0
votes
0
answers
114
views
SAML message intended destination endpoint 'https://serverA/saml/SSO' did not match the recipient endpoint 'https://serverB/saml/SSO' on Weblogic
I am having the same problem configuring spring-security-saml2-core that is presented in this POST. In my case, I have deployed my application in a Weblogic cluster with several managed nodes.
When ...
0
votes
0
answers
331
views
How to integrate Ping Identity SAML with Spring-Boot?
I am trying to integrate spring boot with ping identity. I am getting below error while hitting base-URL
ErrorCode: INVALID_ISSUER - Unable to find application for spEntityId:
'http://localhost:8080/...
0
votes
0
answers
84
views
Integrate Spring Security SAML2 Extension in Strut2 web application
I have a struts2 web application which use Spring Security SAML2 (Spring source) http://springsource.org/spring-security-saml) to get authentication of users in an external system AD FS.
I use spring-...
0
votes
1
answer
268
views
How to serialize an assertion with spring-security-saml2-service-provider
I’ve an existing Spring Boot project used to authenticate an Angular SPA with SAML.
The dependencies included in the Spring Boot project are:
-spring-boot-starter-security (version 2.6.6)
-spring-...
0
votes
0
answers
226
views
Infinite looping when user do login with saml2 & Spring boot1.5
I am using a Spring boot application based on the spring boot version:1.5 and deployed to WebLogic 12C( 12.1.3.0.0) with integrated SAML2.
SAML integration done via "spring-security-saml2-core', ...
0
votes
0
answers
71
views
How To Request a Particular MFA/2FA Method in SAML When Using Microsoft Azure SSO?
For a particular SSO sign in that i'm trying to automate, there's be an URL that I'd need to opened in a browser, that looks like:
'https://login.microsoftonline.com/<something>/saml2?...
2
votes
1
answer
873
views
Creating SAML repository registrations dynamically in Spring Security (Spring Boot)
I have created a sample project which can demonstrate SAML 2 SSO capabilities with saml providers such as Azure AD and Okta.
I was able to configure both of above providers at once in spring ...
1
vote
0
answers
255
views
Spring SAML 2.0 with Dynamic relying registration, doesn't work on Reverse Proxy Nginx
I've been looking for a solution in many questions and forums but nothing worked for me.
I've a use case, in which we register Idp configuration in another service, and then we retrieve that ...
0
votes
1
answer
100
views
Deployment issue in weblogic for spring boot application with SAML
Hi i am trying to deploy a Spring boot application based on spring boot version :1.5 to weblogic 12C( 12.1.3.0.0) it was working fine till recently integrated the SAML2 and once it integrated ...
0
votes
0
answers
196
views
How to create an own IDP (identity provider) with saml 2.0 protocol using java spring?
Here is my situation where I am suppose create an IDP (Identity provider) of my own which follows SAML 2.0 protocol and should be able to authenticate users and let them log in to any service provider ...
0
votes
1
answer
417
views
REST API - SAML Authentication with Azure AD as IDP
Having application with SAML authentication along with Azure AD as IDP. When I hit Login SSO button the following happens:
Hits SAML Redirect URL (/Saml/SAMLLoginRedirect)
Redirects automatically to ...
0
votes
1
answer
1k
views
Spring SAML redirecting to a different URL
I employed this spring boot SAML sample project to my existing project. But I noticed that the redirect url will be automatically set as the url where I get redirected to the log in page. I am ...
1
vote
0
answers
1k
views
How to configure Spring boot app security using SAML Authentication with Azure AD
Hi I am very new to spring boot security. Currently we are using LDAP(IdP) to authenticate the user in spring boot(SP) . Now we want replace LDAP with Azure AD using SAML authentication.
SAML ...
0
votes
1
answer
337
views
Spring Security SAML Extension with Azure AD: SingleLogout problem
I have two web applications configured as SAML Service Providers, using version 1.0.10 of the Spring Security SAML extension. The identity provider is Azure AD.
Single sign-on across both applications ...
0
votes
0
answers
90
views
Redirect to the same page user was in before SAML token Expires in Spring Security
I have developed a Spring security SAML based SSO application.I wanted to redirect the user to the page he is using before the saml token expires.After refreshing the page it is redirecting to home ...
0
votes
1
answer
568
views
How to retrieve relaystate value sent by IDP in POST request body
I'm trying to configure authentication (SSO- SP initiated) with OKTA as IDP where my spring boot application will be working as a Service Provider through SAML. I am trying to retrieve relaystate ...
0
votes
1
answer
418
views
SAML - Multiple Service Provider instances connecting to one IdP application
I have an unusual scenario for SSO of a SaaS application. It is a Java/Spring/Spring-SAML webapp. I would like to introduce a 2nd SAML SSO IdP to my WebApp and have one IdP for client accounts, one ...
1
vote
1
answer
39
views
Is it possible to disable ProxyCount from Scoping tags when using Spring SAML Implementation
Azure does not support several options for SCOPING and it appears that ProxyCount is one of them. ProxyCount is sent as part of the SCOPING tag by default with Spring SAML no matter if it is set to 0 ...
0
votes
1
answer
2k
views
SAML 2.0 + Keycloak + Spring-Boot
We're trying to set up a Keycloak locally with docker to be able to login to our application with SAML 2.0.
Versions used:
Keyloak 18.0.0
Spring Boot 2.6.3
The access to an endpoint forwards to ...
3
votes
1
answer
3k
views
Spring Saml2 and Spring Session - SavedRequest not retrieved (cannot redirect to requested page after authentication / InResponseTo exception)
I am trying to use Spring Boot SAML2 + Spring Session to secure my web application (to be deployed on K8S). Everything is fine without spring-session-data-rest or spring-session-hazelcast. It can ...
4
votes
1
answer
985
views
How do you disable the auto generated pages /login and /logout using Spring SAML2?
I am using Spring Boot - 2.6.6 and Spring Security - 5.7.0-M2 with the spring-security-saml2-service-provider library to create a SAML service provider application. I followed Spring's sample project ...
0
votes
1
answer
431
views
Spring Saml Force IDP Reauthentication when Assertion Age Expires
We have a Spring SAML SP service set up that allows our customers to use SAML to login to our applications. Our Spring SAML app has a max assertion age configured as 12 hours and users have their ...
2
votes
1
answer
863
views
Using Spring Security to convert a SAMl2.0 token into a JWT/OIDC
I am working on a team that needs to add OIDC (JWT/id token) support to an existing Java Spring application using SAML2.0. Do you all have any suggestions or resources to help tackle this problem?
...
1
vote
0
answers
518
views
Okta SAML 2.0 dynamic configuration in spring boot
Is there a way to add a new IDP at runtime from database while using Spring Security Extension for SAML 2.0.
Actually we have enterprise application, so each enterprise have separate authentication ...
2
votes
2
answers
2k
views
How to enable signing of SAML2 AuthNRequest
We have a spring boot application with Saml2 configured for authentication.
We are having hard time configuring signing of Saml2 AuthNRequest, which gets rejected for that reason at IDP (which is ADFS,...