Comments (5)
I appreciate the offer. Given that the project is EOL, I don't think we have much flexibility due to support implications, but I don't mind looking into the possibility.
In the meantime, I'm curious if time would be better spent in making contributions to Spring Security to close the gaps you are experiencing so that you can migrate instead.
from spring-security-saml.
@jzheaux perhaps, but that's a whole lot more work than just changing some imports.
As mentioned on a spring-security issue, I suspect it's not possible without re-writing it all again (which will be the fourth attempt by my reckoning), as the API will not accommodate having one SP authenticating with multiple IdPs.
from spring-security-saml.
Unfortunately I'm not very good at Gradle - I only use Maven.
To build with JDK 17 you need Gradle 7, but then the Spring Gradle plugins this uses don't support it.
There is a tool that may make this very easy, with only build changes needed: https://github.com/eclipse/transformer
from spring-security-saml.
as the API will not accommodate having one SP authenticating with multiple IdPs
Please see https://github.com/spring-projects/spring-security-samples/tree/main/servlet/spring-boot/java/saml2/login and let me know what is missing. This sample is "one SP authenticating with multiple IdPs", at least as far as I understand your phrasing.
from spring-security-saml.
Isn't that multiple SPs ("one" and "two") authenticating with one IdP ("https://simplesaml-for-spring-saml.apps.pcfone.io/saml2/idp/metadata.php")?
That server isn't responding so I can't verify what the metadata actually is.
What's missing is some UI where you choose which IdP you want to authenticate with (commonly called "discovery").
from spring-security-saml.
Related Issues (20)
- Apache HttpClient3.1 has a security vulnerability while using SAML2 authentication in Grails4 HOT 1
- Depenedencies can not be loaded since repo.spring.io got restricted HOT 1
- java 11 compatability HOT 1
- wrongly setting empty to a null Set<String> HOT 1
- Upgrade to secure version of Apache Velocity HOT 3
- VelocityFactory sets invalid properties
- Update Venocity for CVE-2021-29425 Mitigation
- how to handle URL encoding in SAML response HOT 1
- spring-security-saml2 opensaml v.2 dependency conflict with opensaml v.3 HOT 1
- SAMLDefaultLogger logs warning errors on INFO level HOT 1
- Dependency cycle with SAMLEntryPoint HOT 2
- org.springframework.security.saml2.provider.service.authentication.Saml2RedirectAuthenticationRequest is not serializable HOT 1
- login sometimes is only possible at the second click HOT 1
- CSP issue velocityTemplateId on HTTPPostBinding
- Update esapi version for vulernability CVE-2022-23437 to 2.2.3.0 or greater
- EmptyStorageFactory Questions for Replay Prevention HOT 1
- Update esapi version for CVE-2022-23457 HOT 3
- MetadataManager returns random idp from the list of registered
- Why is the Subject of the Assertion required?
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from spring-security-saml.