Questions tagged [spring-saml]

Spring Security SAML Extension enables seamless inclusion of SAML 2.0 Service Provider capabilities in Spring applications.

Filter by
Sorted by
Tagged with
0 votes
0 answers
9 views

Using jdbcauthentication and saml2 authentication in Spring boot

I am developing a Spring boot web application. I want to use SSO with SAML2 firstly. After user authenticate successfully with saml2, I want to use jdbcauthentication to check if the email address ...
Alex's user avatar
  • 1
0 votes
0 answers
21 views

Springboot keycloak SAML Failed to resolve any signing credential

Im working on integrating keycloak SAML with a springboot 3 application. Its a simple rest application with one end-point. when call the API it does not get redirected to the keycloak login, instead I ...
manjosh's user avatar
  • 438
0 votes
0 answers
66 views

How to integrate Spring Boot 3 with Keycloak SAML?

Im working on Spring Boot 3 migration. I had Keycloak SAML working on Spring Boot 2.7.x. I had follwed https://www.codecentric.de/wissens-hub/blog/secure-spring-boot-app-saml-keycloak for the ...
manjosh's user avatar
  • 438
0 votes
1 answer
118 views

authenticationManger method not present in spring security 6, Saml Config migration

We are migrating our springboot application to springboot 3.x. In the latest version of springboot, i see the spring-security upgraded to version 6. In this version WebSecurityConfigurerAdapter is ...
manjosh's user avatar
  • 438
0 votes
0 answers
32 views

Spring SAML2 integrate with Azure

I created a project with spring SAML2, i'm trying to integrate it with Azure AD, now single sign on flow looks pretty good, but single logout is not work properly. I debugged the spring SAML2 ...
zsts's user avatar
  • 1
0 votes
0 answers
46 views

Cors error with post /logout with _csrf token while triggering Single Llogout in IDP

I am using SimpleSamlPHP 2.x as an Identity Provider (IDP) along with Spring Boot 2.7. My Spring SAML Security (spring-security-saml2-service-provider) version is 5.7.5 (recently updated). Currently, ...
Niroz Jung Karki's user avatar
0 votes
1 answer
56 views

Error `The InResponseTo attribute [ARQ...] does not match the ID of the authentication request [ARQ...]` after upgrading Spring boot 2.6 -> 2.7

Context and issue We are at Spring Boot 2.6 and use simpleSamlPhp 1.18.8 as a local idp server running in Docker, accessible through host.docker.internal for our test/develop environment. The ...
RoninTDK's user avatar
1 vote
0 answers
30 views

How to integrate saml to your springboot application with jumpcloud as the idp

We would like to add one of our internal apps to jumpcloud (we use jumpcloud as our exisiting IDP to login to different services like MS-Office). now to add the internal app to it I firstly am doing a ...
Khwaish T's user avatar
1 vote
1 answer
161 views

Implementing multiple customizable URLs for single sign-on with federated IdP in Spring Security SAML2

Our application's single sign-on works with a federated identity provider (IdP) where the IdP selection is based on query parameters or path variables, such as https://:/my-application/idplogin?...
Sumeet Kumar Yadav's user avatar
0 votes
1 answer
404 views

How to execute a filter or handler only once after successful SAML2 login?

I am using Spring Security with SAML2 service provider and have a requirement to set custom tokens as part of cookies in the response after a successful SAML2 login.I have created a filter SetToken ...
Sumeet Kumar Yadav's user avatar
0 votes
0 answers
127 views

SAML integration is breaking after upgrading to spring boot 3.0.6

I have integrated SAML with Spring Security, and recently upgraded to spring 3.0.6. After upgrading the SAML integration is broken. Below is the problem description. After successful authentication, ...
Madhava's user avatar
0 votes
0 answers
38 views

How can I load SAML config files stored in S3 bucket in Spring Boot application using spring-security-saml2-core?

I have an spring boot application in which i have integrated with spring-security-saml2-core for sso authetication and i am trying to put the identity provider xml config files externally. I have ...
Bon Voyage Devs's user avatar
0 votes
0 answers
27 views

How can I construct an extended metadata for a service provider?

I have tried constructing a standard metadata which includes details regarding ACS url,Entity ID,authnRequest needs to be signed,nameid format,acs binding. But I also need to construct an extended ...
Karu's user avatar
  • 61
0 votes
0 answers
538 views

Azure SAML SSO with spring boot using SAML2-core 2.0.0.M31 dependency

Below code works if i add any user to this azure ad application. But i am not able to give access based on group. If any any user is added in particular group then only it shoule be given access. As ...
Gagan Noor Singh's user avatar
0 votes
1 answer
603 views

ESAPI-java.lang.ClassNotFoundException: org.owasp.esapi.reference.JavaLogFactory

Iam currently using esapi 2.2.0.0 version. When i tried to upgrade 2.2.0.0 to 2.5.2.0 iam getting this error..java.lang.ClassNotFoundException: org.owasp.esapi.reference.JavaLogFactory LogFactory ...
Mahesh's user avatar
  • 1
0 votes
0 answers
20 views

SAML issuer field does not get my custom value

I am new to SAML but what I want to do is to change the Issuer in the authrequest of the SAML request. What I did is to go to the documentation of SpringBoot and follow the instructions and I found ...
Alex97's user avatar
  • 411
0 votes
0 answers
13 views

In firfox 91.4.0esr (64-bit) version entered url is triggers one more time in background after sometime

In firefox 91.4.0esr (64-bit) I am trying to access angular app url like <appbaseurl>/app?token=test which checks cookie in browser if session not exists it calls spring saml url <...
rahul's user avatar
  • 416
0 votes
0 answers
158 views

Spring boot login page for both SAML and form based authentication

I am trying to integrate saml in my spring boot application. I have no problem to get form based authentication working and saml authentication working but when I try to get both on same application I ...
Stefano Furlan's user avatar
0 votes
1 answer
248 views

Spring-boot-starter-upgrade-3.0 SAML sso issues

Problem : Initially we wrote spring boot app using spring-boot-starter-parent version - 2.0.5.RELEASE. As part of the app we need SAML SSO so we used spring-security-saml2-core with the version - 1.0....
PVS's user avatar
  • 11
1 vote
1 answer
589 views

spring security 6: saml integration: redirection, registrationId

As I want to update my app to spring boot 3 and implementing the WebSecurityConfigurerAdapter does not work anymore, I try now to use the official spring boot security for my saml integration. I am ...
supernicky's user avatar
0 votes
1 answer
92 views

How to configure grails-spring-security-saml plugin version 5.0.0-RC3 for https applications

I am upgrading my Grails4 application to Grails5 and am trying to upgrade the grails-spring-security-saml plugin from version 4.0.2 to version 5.0.0-RC3. I am using Okta as my identity provider and if ...
mcam11's user avatar
  • 37
0 votes
0 answers
331 views

How to perform IDP initated login in keycloak saml

I have a spring boot application that is integrated to keycloak saml using the spring saml extension. here is my security config class @Configuration @EnableWebSecurity @EnableGlobalMethodSecurity(...
manjosh's user avatar
  • 438
1 vote
0 answers
328 views

Troubles configuring SAML authentication using reverse proxy

I've developed a small Java application as Service Provider to test the SAML authentication. The archtecture is: front-end managed by apache (for Angular FE but now is not important) exposed on port ...
user3703071's user avatar
1 vote
1 answer
398 views

Spring SAML 2.0 extention does not use the public certificate imported in the keystore.jks

I am new to saml 2.0. I'm trying to understand the saml 2.0 springboot extension. I came across the sample app by Vincenzo De Notaris and Thomas Darimont. Here is the git hub sample: https://github....
manjosh's user avatar
  • 438
0 votes
0 answers
214 views

In SAML's AuthnRequest, how to make the AssertionConsumerServiceURL a HTTPS url?

When you access the relying party's url, you are redirected to the asserting party. I see in SAML-tracer: <saml2p:AuthnRequest xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" ...
ericj's user avatar
  • 2,142
0 votes
0 answers
114 views

SAML message intended destination endpoint 'https://serverA/saml/SSO' did not match the recipient endpoint 'https://serverB/saml/SSO' on Weblogic

I am having the same problem configuring spring-security-saml2-core that is presented in this POST. In my case, I have deployed my application in a Weblogic cluster with several managed nodes. When ...
Jose A. Matarán's user avatar
0 votes
0 answers
331 views

How to integrate Ping Identity SAML with Spring-Boot?

I am trying to integrate spring boot with ping identity. I am getting below error while hitting base-URL ErrorCode: INVALID_ISSUER - Unable to find application for spEntityId: 'http://localhost:8080/...
Arpit Gupta's user avatar
0 votes
0 answers
84 views

Integrate Spring Security SAML2 Extension in Strut2 web application

I have a struts2 web application which use Spring Security SAML2 (Spring source) http://springsource.org/spring-security-saml) to get authentication of users in an external system AD FS. I use spring-...
Giuseppe Coniglio's user avatar
0 votes
1 answer
268 views

How to serialize an assertion with spring-security-saml2-service-provider

I’ve an existing Spring Boot project used to authenticate an Angular SPA with SAML. The dependencies included in the Spring Boot project are: -spring-boot-starter-security (version 2.6.6) -spring-...
george's user avatar
  • 1
0 votes
0 answers
226 views

Infinite looping when user do login with saml2 & Spring boot1.5

I am using a Spring boot application based on the spring boot version:1.5 and deployed to WebLogic 12C( 12.1.3.0.0) with integrated SAML2. SAML integration done via "spring-security-saml2-core', ...
gibyalex's user avatar
  • 639
0 votes
0 answers
71 views

How To Request a Particular MFA/2FA Method in SAML When Using Microsoft Azure SSO?

For a particular SSO sign in that i'm trying to automate, there's be an URL that I'd need to opened in a browser, that looks like: 'https://login.microsoftonline.com/<something>/saml2?...
Feiyeung's user avatar
2 votes
1 answer
873 views

Creating SAML repository registrations dynamically in Spring Security (Spring Boot)

I have created a sample project which can demonstrate SAML 2 SSO capabilities with saml providers such as Azure AD and Okta. I was able to configure both of above providers at once in spring ...
gbids's user avatar
  • 489
1 vote
0 answers
255 views

Spring SAML 2.0 with Dynamic relying registration, doesn't work on Reverse Proxy Nginx

I've been looking for a solution in many questions and forums but nothing worked for me. I've a use case, in which we register Idp configuration in another service, and then we retrieve that ...
Jeancarlo Fontalvo's user avatar
0 votes
1 answer
100 views

Deployment issue in weblogic for spring boot application with SAML

Hi i am trying to deploy a Spring boot application based on spring boot version :1.5 to weblogic 12C( 12.1.3.0.0) it was working fine till recently integrated the SAML2 and once it integrated ...
gibyalex's user avatar
  • 639
0 votes
0 answers
196 views

How to create an own IDP (identity provider) with saml 2.0 protocol using java spring?

Here is my situation where I am suppose create an IDP (Identity provider) of my own which follows SAML 2.0 protocol and should be able to authenticate users and let them log in to any service provider ...
Srinivas Naik's user avatar
0 votes
1 answer
417 views

REST API - SAML Authentication with Azure AD as IDP

Having application with SAML authentication along with Azure AD as IDP. When I hit Login SSO button the following happens: Hits SAML Redirect URL (/Saml/SAMLLoginRedirect) Redirects automatically to ...
Sasitharan's user avatar
0 votes
1 answer
1k views

Spring SAML redirecting to a different URL

I employed this spring boot SAML sample project to my existing project. But I noticed that the redirect url will be automatically set as the url where I get redirected to the log in page. I am ...
Wu Qintian's user avatar
1 vote
0 answers
1k views

How to configure Spring boot app security using SAML Authentication with Azure AD

Hi I am very new to spring boot security. Currently we are using LDAP(IdP) to authenticate the user in spring boot(SP) . Now we want replace LDAP with Azure AD using SAML authentication. SAML ...
The_new_coder's user avatar
0 votes
1 answer
337 views

Spring Security SAML Extension with Azure AD: SingleLogout problem

I have two web applications configured as SAML Service Providers, using version 1.0.10 of the Spring Security SAML extension. The identity provider is Azure AD. Single sign-on across both applications ...
A-G's user avatar
  • 305
0 votes
0 answers
90 views

Redirect to the same page user was in before SAML token Expires in Spring Security

I have developed a Spring security SAML based SSO application.I wanted to redirect the user to the page he is using before the saml token expires.After refreshing the page it is redirecting to home ...
mukesh36's user avatar
0 votes
1 answer
568 views

How to retrieve relaystate value sent by IDP in POST request body

I'm trying to configure authentication (SSO- SP initiated) with OKTA as IDP where my spring boot application will be working as a Service Provider through SAML. I am trying to retrieve relaystate ...
SIMRAN KHOLIA's user avatar
0 votes
1 answer
418 views

SAML - Multiple Service Provider instances connecting to one IdP application

I have an unusual scenario for SSO of a SaaS application. It is a Java/Spring/Spring-SAML webapp. I would like to introduce a 2nd SAML SSO IdP to my WebApp and have one IdP for client accounts, one ...
Thomas's user avatar
  • 1,119
1 vote
1 answer
39 views

Is it possible to disable ProxyCount from Scoping tags when using Spring SAML Implementation

Azure does not support several options for SCOPING and it appears that ProxyCount is one of them. ProxyCount is sent as part of the SCOPING tag by default with Spring SAML no matter if it is set to 0 ...
P_S's user avatar
  • 11
0 votes
1 answer
2k views

SAML 2.0 + Keycloak + Spring-Boot

We're trying to set up a Keycloak locally with docker to be able to login to our application with SAML 2.0. Versions used: Keyloak 18.0.0 Spring Boot 2.6.3 The access to an endpoint forwards to ...
marco's user avatar
  • 183
3 votes
1 answer
3k views

Spring Saml2 and Spring Session - SavedRequest not retrieved (cannot redirect to requested page after authentication / InResponseTo exception)

I am trying to use Spring Boot SAML2 + Spring Session to secure my web application (to be deployed on K8S). Everything is fine without spring-session-data-rest or spring-session-hazelcast. It can ...
Simon Wong's user avatar
4 votes
1 answer
985 views

How do you disable the auto generated pages /login and /logout using Spring SAML2?

I am using Spring Boot - 2.6.6 and Spring Security - 5.7.0-M2 with the spring-security-saml2-service-provider library to create a SAML service provider application. I followed Spring's sample project ...
mmoussa's user avatar
  • 43
0 votes
1 answer
431 views

Spring Saml Force IDP Reauthentication when Assertion Age Expires

We have a Spring SAML SP service set up that allows our customers to use SAML to login to our applications. Our Spring SAML app has a max assertion age configured as 12 hours and users have their ...
nmb1106's user avatar
  • 385
2 votes
1 answer
863 views

Using Spring Security to convert a SAMl2.0 token into a JWT/OIDC

I am working on a team that needs to add OIDC (JWT/id token) support to an existing Java Spring application using SAML2.0. Do you all have any suggestions or resources to help tackle this problem? ...
Tony Pendleton's user avatar
1 vote
0 answers
518 views

Okta SAML 2.0 dynamic configuration in spring boot

Is there a way to add a new IDP at runtime from database while using Spring Security Extension for SAML 2.0. Actually we have enterprise application, so each enterprise have separate authentication ...
Ankit Dabhi's user avatar
2 votes
2 answers
2k views

How to enable signing of SAML2 AuthNRequest

We have a spring boot application with Saml2 configured for authentication. We are having hard time configuring signing of Saml2 AuthNRequest, which gets rejected for that reason at IDP (which is ADFS,...
Mika Riekkinen's user avatar

1
2 3 4 5
16