opensaml

How to configuration of IDP metadata and SP metadata in Spring Security SAML sample?

吃可爱长大的小学妹 提交于 2019-12-03 08:28:49
I want to deal with Spring Security SAML. For this, I start to explore Spring Security SAML . At the beginning, I create an account at SSOCircle . Than I configurated of IDP metadata and generation of SP metadata (4.2.2 and 4.2.3). At entityId I set: <bean id="metadataGeneratorFilter" class="org.springframework.security.saml.metadata.MetadataGeneratorFilter"> <constructor-arg> <bean class="org.springframework.security.saml.metadata.MetadataGenerator"> <property name="entityId" value="http://idp.ssocircle.com"/> </bean> </constructor-arg> </bean> When I start application, I have: Error occurred

SSO - SAML, Redirect a user to a specified landing page after successful log in

岁酱吖の 提交于 2019-12-03 07:41:33
I am implementing SSO where I am the Identity Provider, right now I am able to successfully log into the Service Provider. But it takes me to the home page. I want to specify the landing page URL when I post the response. Have searched quite a lot but could not find anything convincing. Do not quite know which element of the SAML response carries the Landing page URL or is the in the form that I have to specify. Using java and opensaml libraries to generate the response. Though it is not in the SAML specs, a de-facto standard is to use the RelayState element for that. It is added as a

In order to implement SAML do I need Shibboleth SP installed on my host?

杀马特。学长 韩版系。学妹 提交于 2019-12-03 04:38:57
问题 I got a couple of SAML implementation questions to clear up my confusion ... I need to implement SSO in a java web app. In order to do so, do I need Shibboleth SP installed on my host like so, or can I provide the SP functionality via OpenSAML? I am assuming that shibboleth is doing the same as OpenSAML but just on a webserver level, whereas OpenSAML will do it on the software side. Is that assumption correct? EDIT: So shibboleth (according to Scott Cantor) is build with OpenSAML ... does my

SAML Client implementation for Android?

|▌冷眼眸甩不掉的悲伤 提交于 2019-12-03 03:09:33
Is there a sample application which I can refer for SAML interactions on Android? Anyone successfully ported/used OpenSAML on Android ? I am trying to write a simple app which would (instead of browser redirection) use native APIs to carry out SAML authentication. Also some pointers to test environment where I can test SAML clients would help. If you need to authenticate your mobile app users against a SAML 2.0 IDP, then you would NOT build this into Android (or iOS). Best practice would be to have your mobile app use OAuthv2 and exchange a SAML Response generated by the IDP for your local SP

how to migrate from opensaml 2.6 to 3.1.1

旧街凉风 提交于 2019-12-02 23:10:02
I have to migrate a class from opensaml 2.6 to opensaml 3.1.1 Compiling I obtain some errors 1) Element plaintextElement = getElementAssertion(inputBean); String xml = XMLHelper.prettyPrintXML(plaintextElement); I cant't find the class XMLHelper in the new version. 2) DefaultBootstrap.bootstrap(); builderFactory = Configuration.getBuilderFactory(); Configuration.getMarshallerFactory().getMarshaller(assertion).marshall(assertion); I can'f find class DefaultBootstrap and I can't find a class Configuration with the methods getBuilderFactory(), getMarshallerFactory() 3) BasicCredential credential

OpenSAML (2.0) Signature validation not working

自古美人都是妖i 提交于 2019-12-02 18:36:33
Problem: I am using OpenSAML to build a means of authenticating the SAML 2.0 response posted to our servers. I have got most of it working, with the ability to access the various aspects of the assertion. The only issue is that when I attempt to validate the signature using the public key below, it states that " Signature did not validate against the credential's key ". Any ideas? Public Key: MIICozCCAgygAwIBAgIGATxK1oY4MA0GCSqGSIb3DQEBBQUAMIGUMQswCQYDVQQGEwJVUzETMBEG A1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzENMAsGA1UECgwET2t0YTEU

SAML EncryptedAssertion Decryption failing

左心房为你撑大大i 提交于 2019-12-02 14:36:14
问题 I am implementing a SP using SAML. When I am trying to decrypt the EncryptedAssertion I am getting the below error. org.opensaml.xml.encryption.DecryptionException: Failed to decrypt EncryptedData at org.opensaml.xml.encryption.Decrypter.decryptDataToDOM(Decrypter.java:546) at org.opensaml.xml.encryption.Decrypter.decryptDataToList(Decrypter.java:453) at org.opensaml.xml.encryption.Decrypter.decryptData(Decrypter.java:414) at org.opensaml.saml2.encryption.Decrypter.decryptData(Decrypter.java

SAML EncryptedAssertion Decryption failing

久未见 提交于 2019-12-02 13:38:46
I am implementing a SP using SAML. When I am trying to decrypt the EncryptedAssertion I am getting the below error. org.opensaml.xml.encryption.DecryptionException: Failed to decrypt EncryptedData at org.opensaml.xml.encryption.Decrypter.decryptDataToDOM(Decrypter.java:546) at org.opensaml.xml.encryption.Decrypter.decryptDataToList(Decrypter.java:453) at org.opensaml.xml.encryption.Decrypter.decryptData(Decrypter.java:414) at org.opensaml.saml2.encryption.Decrypter.decryptData(Decrypter.java:141) at org.opensaml.saml2.encryption.Decrypter.decrypt(Decrypter.java:69) I looked for this error and

SAML client for Android?

微笑、不失礼 提交于 2019-12-02 02:11:04
问题 I'm working on a project which needs to parse some data from some protected web pages. In order to gain the access those pages, I have to overcome a SAML authetication form (Shibboleth). Is there someone who was able to implement this standard in Android (Java)? I already read this thread: SAML Client implementation for Android? but it doesn't give me a good solution. In fact, I need to get the data of some protected web pages in order to parse it, not to let the user to see the content of

SAML client for Android?

☆樱花仙子☆ 提交于 2019-12-02 01:03:18
I'm working on a project which needs to parse some data from some protected web pages. In order to gain the access those pages, I have to overcome a SAML authetication form (Shibboleth). Is there someone who was able to implement this standard in Android (Java)? I already read this thread: SAML Client implementation for Android? but it doesn't give me a good solution. In fact, I need to get the data of some protected web pages in order to parse it, not to let the user to see the content of such pages. Therefore logging in through a WebView is not what I really need.. I think OpenSAML is your