Questions tagged [spring-saml]
Spring Security SAML Extension enables seamless inclusion of SAML 2.0 Service Provider capabilities in Spring applications.
737
questions
0
votes
0
answers
21
views
How to get current url in relay state dynamically
I am using spring boot with saml authentication.
I want to redirect url after successful authentication, so I am trying to save the url in relay state in WebSSOProfileOptions. But if I set relay state ...
0
votes
0
answers
31
views
SAML 2.0 + Keycloak + Spring-Boot
We're trying to set up a Keycloak locally with docker to be able to login to our application with SAML 2.0.
Versions used:
Keyloak 18.0.0
Spring Boot 2.6.3
The access to an endpoint forwards to ...
1
vote
1
answer
77
views
Spring Saml2 and Spring Session - SavedRequest not retrieved (cannot redirect to requested page after authentication / InResponseTo exception)
I am trying to use Spring Boot SAML2 + Spring Session to secure my web application (to be deployed on K8S). Everything is fine without spring-session-data-rest or spring-session-hazelcast. It can ...
3
votes
1
answer
133
views
How do you disable the auto generated pages /login and /logout using Spring SAML2?
I am using Spring Boot - 2.6.6 and Spring Security - 5.7.0-M2 with the spring-security-saml2-service-provider library to create a SAML service provider application. I followed Spring's sample project ...
0
votes
1
answer
48
views
Spring Saml Force IDP Reauthentication when Assertion Age Expires
We have a Spring SAML SP service set up that allows our customers to use SAML to login to our applications. Our Spring SAML app has a max assertion age configured as 12 hours and users have their ...
0
votes
0
answers
11
views
is there any alternative for AbstractObservableMetadataProvider in saml
we are using
import org.opensaml.saml2.metadata.provider.AbstractObservableMetadataProvider;
import org.opensaml.saml2.metadata.provider.MetadataProviderException;
in opensaml 2. however now i want ...
1
vote
1
answer
124
views
Using Spring Security to convert a SAMl2.0 token into a JWT/OIDC
I am working on a team that needs to add OIDC (JWT/id token) support to an existing Java Spring application using SAML2.0. Do you all have any suggestions or resources to help tackle this problem?
...
0
votes
0
answers
98
views
Remove <?xml version="1.0" encoding="UTF-8"?> From SAML Request
I'm currently using spring-security-saml2-service-provider to build SAML integration with 3rd party, and I want to remove the XML header from the SAML auth request is there any way to remove the ...
0
votes
0
answers
32
views
Spring Security SAML ADFS on NON Spring project
I have a web application NOT implemented on Spring Boot or Spring itself. It has no Spring whatsoever, it was made using RESTEasy running on Tomcat.
I'm supposed to add ADFS authentication to this web ...
0
votes
0
answers
73
views
Spring SAML - Importing an IDP metadata that includes my own SP SSO descriptor
I've implemented Shibboleth authentication using Multi-tenancy in my system(The system is playing the SP). I'm integrating IDPs metadata downloaded by using HTTPMetadataProvider. Then I tried ...
0
votes
0
answers
42
views
Spring Security SAML2 CORS Origin no logged event after authenticated
I want to set up a spring security SAML2, with angular application as frontEnd.
The front end application is hosted in different domain.
This is how I configured my SpringSecurity:
protected void ...
0
votes
0
answers
203
views
Okta SAML 2.0 dynamic configuration in spring boot
Is there a way to add a new IDP at runtime from database while using Spring Security Extension for SAML 2.0.
Actually we have enterprise application, so each enterprise have separate authentication ...
0
votes
1
answer
261
views
How to enable signing of SAML2 AuthNRequest
We have a spring boot application with Saml2 configured for authentication.
We are having hard time configuring signing of Saml2 AuthNRequest, which gets rejected for that reason at IDP (which is ADFS,...
0
votes
1
answer
92
views
How Spring SAML Works if assertion expires
I have integrated wso2 IS 5.11 with Spring SAML. After login the SAML response contains 5 minutes of assertion expiry. But if the same user uses the application for more than 5 minutes. There is no ...
0
votes
0
answers
74
views
how can I parametrize the SAML metadata xml file?
I have an XML SAML metadata file in my project that contains fields such as:
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<md:EntityDescriptor xmlns:...
4
votes
1
answer
148
views
Howto disable signature verification in Spring Security SAML 5.6.1?
I'm currently migrating from old deprecated Spring Security SAML Extension 1.0.10 to the SAML implementation in Spring Security 5.6.1.
In the old extension there was the possibility to disable the ...
0
votes
0
answers
88
views
Spring Security SAML2 X509Support.decodeCertificate error lengthTag=127, too big
I want to set up a new Spring boot Security SAML2 authentication.
I configured my WebSecurityConfigurerAdapter like this
@Configuration
@EnableWebSecurity
public class SamlSecurityConfig extends ...
0
votes
0
answers
37
views
How can I generate SAML2.0 Service Provider MetaData for ADFS from my Spring Boot app?
May I know is there any way to generate Service Provider MetaData in Spring Boot for SAML2.0. I have found answers in Spring but I am not able to understand how to incorporate it into a Spring Boot.
1
vote
2
answers
476
views
Spring Boot SAML using AWS SSO as IdP errors with Bad Input
I want to build a site hosted with Spring Boot and I would like to use AWS SSO as the SAML identity provider for authentication. I have built a PoC application and tried to follow AWS configuration ...
0
votes
0
answers
119
views
SpringBoot SAML 2 ignore verification certificate
I try to create a Spring boot SAML2 authentification with our entreprise service provier.
For development purpose we want as a first step ignore the verification credentials (I don't have a ...
0
votes
0
answers
29
views
Can I configure Spring application with multiple IDP (IDP initiated flow)?
I have a spring application configured with Keycloak as IDP (IDP initiated flow), I need to add another IDP. The problem is, how to configure the application to determine which idp was used to log in ...
2
votes
1
answer
442
views
SAML2 Authentication with authorization based on SAML assertions
I'm using spring-security-saml2-service-provider to authenticate my SpringBoot webapp against a SAML IdP - this works. I can also access the SAML assertions within a REST Controller using @...
0
votes
0
answers
590
views
Getting "Cannot_match_source_hash" error when trying to connect using spring boot using SAML. IDP is keycloack
Hi Have create realms and client in keycloack. Trying to connect using SAML descriptor using spring boot but getting "Cannot_match_source_hash" in keycloack. Am I doing something wrong? Do I ...
1
vote
0
answers
155
views
How use JKS Keystore in the Spring Security SAML2 context
I am in the middle of transferring an old SAML implementation that was written using the Spring Security SAML Extension into the the Spring Security SAML2. I have difficulties with the following bean:
...
0
votes
2
answers
288
views
Claim not found in custom policy for Azure B2C - Saml
I've uploaded my custom policy starting from SocialAndLocalAccounts template in my Azure AD B2C.
I've changed the policy to get authentication with SAML protocol as documented in MS Documentation
This ...
0
votes
1
answer
37
views
Does Azure B2C User Flows support SAML protocol?
Using Azure B2C User Flows is it possible to configure clients with SAML protocol support? Or for is required to use Custom Policies?
0
votes
0
answers
68
views
Integrate Spring Security SAML in Legacy java Web Application
We have a legacy java web application that uses only credential authentication. We are planning to introduce SAML authentication mechanism in the product. We've found a couple of similar posts but all ...
0
votes
1
answer
65
views
Configuring Multiple Spring Security [duplicate]
I have the following configuration:
@Configuration
@EnableWebSecurity
public class SecurityConfig {
@Configuration
@Order(1)
public static class SamlConfig extends ...
1
vote
0
answers
90
views
Spring Boot SAML SSO custom JWT token refresh
I have followed below URL to configure SAML SSO to the existing spring boot application, which already have User name - password authentication and JWT authorization for APIs.
https://github.com/...
1
vote
0
answers
55
views
Using SAML with spring 4
I'm currently trying to add saml on a spring (4.2.4.RELEASE) project.
I tried with the dependencies
spring-security-saml2-core-1.0.1.RELEASE (I tried all versions till 1.1.10.RELEASE of saml2)
The ...
0
votes
1
answer
44
views
wso2 spring security saml stateless integration
I am using Wso2 identity server 5.11.0 as IDP and Spring SAML for SAML integration. But after the authentication the spring SAML stores jsession-id in the client browser using which further ...
0
votes
0
answers
74
views
Spring boot SAML authentication with Duo as IdP getting re-redirected to spring form login page after IDP login
Spring boot SAML authentication with Duo as IdP in staging ,getting re-redirected to spring form login page after IDP login.
While I have tried the same app in my local with Okta as IdP and it works.
&...
0
votes
1
answer
105
views
SAML signing certificate- your role does not have permissions required to manage signing certificates
Receiving the follow error while configuring. help me fix on this issue
SAML signing certificate- your role does not have permissions required to manage signing certificates
0
votes
0
answers
23
views
Error initializing the application: invalid keystore path. It must start with file:// SAML Plugin
When I build the webserver it gives the error:
ERROR context.GrailsContextLoader - Error initializing the application: invalid keystore path. It must start with file://
java.lang....
0
votes
0
answers
90
views
How to change signing algorithm used for AuthnRequest in spring-security-saml2-service-provider to RSA-PSS?
Is it possible and if yes how to change the signing algorithm used for signing saml AuthnRequest? I'm using spring-security-saml2-service-provider module (version 5.4.x) for integration with the ...
0
votes
0
answers
123
views
Place all the metadata in a Path in Spring SAML
I have this implementation of Spring Saml. I'm planning to discover all IDP metadata in 1 location and discover it automatically without defining a new ExtendedMetadataDelegate bean in security-...
0
votes
0
answers
102
views
Add Constractor-arg list in a property file
I have implemented this spring-security-saml. There is a bean that has a constructor-args, which is a list of ExtendedMetadataDelegate. How can I put the list of ExtendedMetadataDelegate in a property ...
2
votes
1
answer
568
views
How to alter the default SP SSO URL of Spring Security SAML?
I try integrating Spring Security SAML in my project. I have experienced the demo of okta. And I know the URI /saml/SSO is used to consume the SAMLResponse from Idp. But I have registered a consume-...
0
votes
0
answers
18
views
Can I inject a value into the create-session attribute of the <http> element?
I am working on a project that uses Spring XML configuration. Most of the configuration attributes have been extracted into property files. There is one difficult case though.
What is wanted:
<...
1
vote
0
answers
325
views
SAML 2.0 implementation returns 403 after logged in
I implemented a saml security configuration with okta and it is returning 403 after the user logged in from the okta page when he goes to /saml/sso url. I guess the service does not accept the answer ...
0
votes
1
answer
168
views
Spring SAML: Multiple ACS URLs?
I'm trying to configure Spring SAML to work with multiple ACS URLs. I'd like the ACS URL to be determined based on some input the user provides, and it will select one of two ACS urls.
For example:
...
0
votes
0
answers
74
views
how to allow a url in SAML-Authentication and authenticate that url using Basic-Authentication in Spring
I have 2 AuthenticationProvider. SAML- samlAuthenticationProvider and inMemoryAuthenticationProvider(for Basic Authentication). Its not about combining both Authentication, but to choose one (like &...
0
votes
0
answers
338
views
X509 certificate and signature is missing in SAML resquest - generated from SP ( Sp Initiated SSO )- Spring Boot, SAML, ADFS
ADFS Occured Exception --
microsoft.identitymodels.protocols.xmlsingnature.signaturevarificationfailedexception:MSIS0038: SAML message has wrong signature.
------- SAML Request: -----
saml2p:...
0
votes
0
answers
156
views
Spring security refer JKSKeyManager keystore from java jdk keystore in saml XML configuration file
I am using spring security's open saml library for authentication.
My Service Provider is my spring web application configured with spring saml. My IDP is OpenSSO.
In the spring-security-saml2-core ...
3
votes
3
answers
656
views
SAML getting Signature Reference URI did not resolve to the expected parent Element
In Spring SAML I am getting success response from IDP, but while validating the SAML response I am getting the exception Signature Reference URI '#JJl4B32SXAqLfdR2R0mkYN-yLimsrLWVGHmHIvEcpuQ' did not ...
0
votes
1
answer
236
views
Routing to Angular component after Jersey & Spring SAML Security SSO Validation
I am working on an app which is using Angular as frontend and Jersey Integrated with Spring SAML Security for SSO Authentication.
I tried to invoke the app from Angular (http://localhost:4200) which ...
0
votes
1
answer
678
views
Java Spring Application - Integration with Azure AD for SSO
I have a Java Spring MVC application (note that its not spring boot).
We have a requirement to implement SSO for the users of our application. I did some research, the identity provider (IDP) in our ...
0
votes
1
answer
505
views
Spring Security SAML2 service provider - RelyingPartyRegistration.entityId() vs RelyingPartyRegistration.assertingPartyDetails(c -> c.entityId())
Small question regarding Spring Security SAML2 please.
To narrow the scope, the question is regarding:
<dependency>
<groupId>org.springframework.security</groupId>
...
1
vote
0
answers
268
views
Spring SAML: Setting RelayState dynamically from a query parameter on the call that creates the SAML request
I've been looking for a way to set the relaystate dynamically in the SAML request based on a value that is passed in. I noticed that the WebSSOProfileOptions has a relayState field but it doesn't look ...
0
votes
1
answer
95
views
SLO fails when SP has timed out
Using Spring Security SAML 1.0.10, when a SAML session has timed out on the SP, but is still active on the IdP, an SLO attempt fails.
How to reproduce
Set a session timeout to one minute (server....