Questions tagged [spring-saml]

Spring Security SAML Extension enables seamless inclusion of SAML 2.0 Service Provider capabilities in Spring applications.

Spring Security SAML Extension enables integration of Spring applications with all SAML 2.0 Identity Provider products such as ADFS 2.0, Shibboleth, OpenAM/OpenSSO, Ping Federate and Okta.

Official Website: http://projects.spring.io/spring-security-saml/

Useful links:

728 questions
197
votes
1 answer

Spring Security on Wildfly: error while executing the filter chain

I'm trying to integrate Spring Security SAML Extension with Spring Boot. About the matter, I did develop a complete sample application. Its source code is available on GitHub: spring-boot-saml-integration on GitHub By running it as Spring Boot…
vdenotaris
  • 11,848
  • 23
  • 69
  • 121
23
votes
1 answer

Single Sign-On in Spring by using SAML Extension and Shibboleth

I'd like to implement a Single Sign-on (SSO) authentication layer in my Spring-based application with the aim of supporting authentication and authorization from different security domains. I've chosen Shibboleth as IdP, but I have yet to identify…
vdenotaris
  • 11,848
  • 23
  • 69
  • 121
18
votes
2 answers

IDP initiated SAML login error - Authentication statement is too old to be used with value

We are using ADFS as an IDP and our application acts as SP. Below is a sample Auth response
rakpan
  • 2,453
  • 3
  • 20
  • 34
17
votes
5 answers

Spring Security SAML plugin - No hosted service provider is configured exception

I am trying to integrate SAML SSO with Spring Security using Spring Security SAML extension. Before, I succeeded to run a proof of concept found here: https://github.com/vdenotaris/spring-boot-security-saml-sample. Unfortunately, after moving the…
mc.suchecki
  • 1,767
  • 3
  • 22
  • 43
17
votes
5 answers

trusted certificate entries are not password-protected Spring SAML

I have generated testIdp.cer file by copying 509 entry of the IDP I am planning to connect. Then I created JKS file by executing the following command keytool -importcert -alias adfssigning -keystore C:\Users\user\Desktop\samlKeystore.jks -file …
SM KUMAR
  • 425
  • 2
  • 8
  • 13
15
votes
3 answers

Signature trust establishment failed for SAML metadata entry

In order to fetch metadata from a remote source, I defined an ExtendedMetadataDelegate bean as follows: @Bean @Qualifier("replyMeta") public ExtendedMetadataDelegate replyMetadataProvider() throws MetadataProviderException { String metadataURL =…
vdenotaris
  • 11,848
  • 23
  • 69
  • 121
15
votes
3 answers

Recipient endpoint doesn't match with SAML response

Usually my Spring SAML-based Service Provider (SP) implementation works fine, but sometimes it returns this error: [2014-07-17 16:00:58.767] boot - 1078 DEBUG [http-bio-80-exec-1] --- BaseMessageDecoder: Successfully decoded message. [2014-07-17…
vdenotaris
  • 11,848
  • 23
  • 69
  • 121
14
votes
1 answer

What is the best SSO solution for a native mobile app which can support multiple IDPs?

In our current situation, our web-based application(SP) has already integrated SSO using Spring Security SAML extension. Our product is a SaaS and we have different clients who may have different IDPs (Identity Providers) configured at their end.…
abhilash
  • 745
  • 1
  • 8
  • 19
12
votes
1 answer

Impersonate java.lang.IllegalStateException: UserDetailsService is required

I am trying to implement the impersonate using SwitchUserFilter in Spring but I'm getting an error. The project runs good without this implementation. Also the project is using Java annotations not xml configuration and has SecureAuth…
Angel Cuenca
  • 1,345
  • 4
  • 21
  • 42
12
votes
4 answers

Spring SAML Sample application returns Could not initialize class org.apache.commons.ssl.TrustMaterial

I have been trying to get the Spring SAML Sample application up and running, but have been struggling for days, and searching the internet with no success. I have followed all the steps in the Quick start guide.... when I click the 'Start single…
Nikolai von Veh
  • 123
  • 1
  • 5
11
votes
3 answers

Setting the ExtendedMetadata 'signingAlgorithm' field

I'm having an issue getting the Spring SAML integration to generate the correct metadata file for my IdP. I was issued new SHA256 SSL certs. I've gone through all of the steps to create the appropriate keyStore and have my Spring security…
rlb3778
  • 131
  • 2
  • 5
11
votes
2 answers

SSL configuration issue with Spring-SAML

I'm trying to set up a SP based on "spring-security-saml2-sample", but when I deploy the WAR file on Tomcat I get the following exception: Initialization of metadata provider org.opensaml.saml2.metadata.provider.HTTPMetadataProvider@443c35d3 failed,…
Daniel
  • 119
  • 1
  • 1
  • 3
10
votes
2 answers

SAMLException: InResponseToField of the Response doesn't correspond to sent message

We are working on an application, which is protected with spring security saml. Authentication works fine, but there is one problem with the following workflow in production environment. user requests the unprotected address www.server.com response…
Ogod
  • 620
  • 1
  • 5
  • 15
10
votes
2 answers

How to read value of SAML attribute received from the IdP?

I'm using Spring Security SAML 1.0.1, and I want to know the value of the SAML attribute whose name is "eduPersonAffiliation". I've coded a class which implements the org.springframework.security.saml.userdetails.SAMLUserDetailsService interface and…
Grégoire C
  • 1,291
  • 1
  • 13
  • 31
10
votes
1 answer

How to add new idp metadata in spring-SAML at runtime

I am integrating spring-security-saml extension to support SSO in my web-application, my application should allow different customers to add their IDP metadata and their certificate to my webapp (which is an SP) so that my webapp can initiate SSO…
Rahul
  • 794
  • 1
  • 7
  • 25
1
2 3
48 49