can I implement both SAML and basic spring security within an application?

Question

I have requirement for our application where we need to implement Spring SAML within our app to enable federated SSO for one customer. However we need to maintain existing login flow using spring-security for other customer.

So my question is can we have two security mechanism for an web application so that it will be treated as multi-tenancy.

Can i implement OAuth and SAML in same application.

thanks in advance..

Answer 1

Yes, you can combine your existing password authentication with SAML. See the sample application of Spring SAML for details - it contains both of the methods combined. It is also possible to include OAuth use-cases, but I'm not aware of any guide for it.