saml

Spring security Saml - Time difference between SP and IDP

匿名 (未验证) 提交于 2019-12-03 07:50:05
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I am looking for a way to increase the expiration time of my saml messages. I use Spring Security with SAML 1.0.0-RC2. At this moment, if the servers** time are too different, e.g. 5 minutes, I got following error: HTTP Status 401 - Authentication Failed:Error validating SAML message: SAML response is not valid; nested exception is org.opensaml.common.SAMLException: SAML response is not valid I want to set the expiration time to 10 minutes, to prevent those errors. I have been looking at the documentation, but I don't understand how to

SSO - SAML, Redirect a user to a specified landing page after successful log in

岁酱吖の 提交于 2019-12-03 07:41:33
I am implementing SSO where I am the Identity Provider, right now I am able to successfully log into the Service Provider. But it takes me to the home page. I want to specify the landing page URL when I post the response. Have searched quite a lot but could not find anything convincing. Do not quite know which element of the SAML response carries the Landing page URL or is the in the form that I have to specify. Using java and opensaml libraries to generate the response. Though it is not in the SAML specs, a de-facto standard is to use the RelayState element for that. It is added as a

SAML library/component for .NET

核能气质少年 提交于 2019-12-03 07:36:38
问题 Can anyone recommend libraries for generating SAML assertions for a federated sign-on implementation in .NET. It would be ideal if it was integrated with the ASP.NET membership API. 回答1: In case anyone else stumbles upon this: http://saml2.codeplex.com It's a fork of OIOSAML.NET for more general purposes. 回答2: We ended up setting up a test using the ComponentSpace SAML 2.0 component. Seems to be working pretty well so far. It's nice that they have a free trial version. http://www

Spring saml - how remember request parameter when initiate login on SP, and procesing them after IdP response

谁说胖子不能爱 提交于 2019-12-03 07:25:29
I want remember url request parameter from first request of my site (SP) and use them after response from IdP. I'm using spring-saml extension and think about relayState attribute but can't find example how build it with parameters from request. I need that for redirect user after sso authentication process to target page (module of application) depends on what was in first request. Spring SAML sample application behaves like this out of the box. When user hits a page which is protected by Spring Security and requires authentication system: remembers parameters which were used to invoke the

How to validate a SAML signature value

 ̄綄美尐妖づ 提交于 2019-12-03 06:22:26
问题 I have a customer who is sending a Security key. The encryption they are using is triple DES. Every Assertion they send has a signature value which needs to be validated to give them necessary privileges. Can you give me a sample code which does this? 回答1: Encryption and signing are two different animals. Triple DES is a symmetric key method (same key used for encryption and decryption). Digital signatures, on the other hand, use asymmetric keys (private/public key pair), where the signature

SSO with SAML, Keycloak and Nextcloud

烈酒焚心 提交于 2019-12-03 06:01:38
问题 I am trying to setup Keycloak as a IdP (Identity Provider) and Nextcloud as a service. I want to setup Keycloak as to present a SSO (single-sign-on) page. I am running a Linux-Server with a Intel compatible CPU. What is the correct configuration? Keycloak will be running as https://kc.domain.com Nextcloud will be running as https://nc.domain.com 回答1: Prerequisit To use this answer you will need to replace domain.com with a actual domain you own . Also replace email@domain.com with your

How to convert SAML XML token string to either SecurityToken or ClaimsPrincipal instance?

不羁岁月 提交于 2019-12-03 05:40:46
问题 My context: .Net RESTful web service Client (mixed platforms, technologies, lib capabilities) has obtained a SAML token Trying to accept the token for authentication/authorization in the REST service in HTTP Authorization / X-Authorization header as query parameter Will also support SWT later, but need to get SAML tokens going Details: I have a SAML token in a string: <saml:Assertion xmlns:saml="..." ...> ..etc... </> In an HttpModule, I want to convert this into a ClaimsPrincipal so that my

What is exactly RelayState parameter used in SSO (Ex. SAML)?

大城市里の小女人 提交于 2019-12-03 05:28:39
问题 I am trying to understand SSO using SAML. I have come across the RelayState parameter and am very confused exactly why it comes first in SSO to send encoded URLs? What exactly does it mean? Please read the following from the Google Developer documentation: Google generates a SAML authentication request. The SAML request is encoded and embedded into the URL for the partner's SSO service. The RelayState parameter containing the encoded URL of the Google application that the user is trying to

What do I need to know about XML Signatures to get SAML working?

北城以北 提交于 2019-12-03 05:04:34
问题 At work we have a web app that we'll need to interface with another company's web app using Single Sign On validated by SAML. Our web apps are written in PHP, and it's obviously irrelevant what language choice the other company is using. Nonetheless, I've needed to write a simple API that this other company can send SOAP requests to with SAML requests, and generate back a SAML response. I've been writing it from scratch for three reasons: 1) there don't really seem to be many options for SAML

Web SSO using Java and SAML 2.0 [closed]

北城余情 提交于 2019-12-03 04:55:59
问题 Closed. This question is off-topic. It is not currently accepting answers. Want to improve this question? Update the question so it's on-topic for Stack Overflow. Closed 2 years ago . I'd like to write a web application which does the authentication using SAML 2.0 tokens, issued by an identity provider. I understand, according to this question, that there is a viable solution in the PHP world using simpleSAMLphp. Is there an equivalent method in the Java world? Are there out of the box