SingleSignOn | Example project | Identity Management library

I'm using CAS server to handle authentication for my web apps within Tomcat server, and everything works fine when I send requests from localhost like: https://localhost:8443/WebApp.

But if I want to send request from my virtual machine for example, I would use private network IPv4 address of my host and that would look like: https://192.168.1.13:8443/WebApp.

But I get an exception: java.lang.IllegalArgumentException: unrecognized server name : 192.168.1.13:8443

I tried editing hosts file on Windows by adding: 192.168.1.13 localhost, but no help. I also changed server name property in cas.properties from http://localhost:8080 to https://192.168.1.13:8443 but also no help.

My question is, how can I make CAS server to accept requests that are not from localhost? It won't accept even from 127.0.0.1, only if it says localhost?

Full stack trace:

Our SPA uses Azure B2C and MSAL (React) for user authentication. There are other requirements so we use custom policies instead of predefined user flows. But I struggle to implement Keep Me Signed In (KMSI) feature following these instructions.

1. I used custom policies from the starter pack: Phone_Email_Base.xml and SignUpOrSignInWithPhoneOrEmail.xml
2. Added True entry to
3. Updated relying party policy file with this:

I am trying to use the AWS SSO SCIM API in order to retrieve the AWS SSO groups for a particular user.

Looking at the documentation https://docs.aws.amazon.com/singlesignon/latest/developerguide/listgroups.html

It mentions the following

• To see group info for a certain member, call ListGroup with a member filter
• If you're using the member filter, you have to use the id filter (refer to supported filter combinations).
• It appears that the id filter, is the group ID, because of this note: Note that the use of id as an individual filter, while valid, should be avoided as there is already a getGroup endpoint available.

Also, at https://docs.aws.amazon.com/singlesignon/latest/developerguide/limitations.html next to the members attribute it mentions that it is supported, but cannot be read in a response.

I have been playing with the API but could not get any group info for a user regardless of the combination of the parameters.

Based on the above, I conclude that the API does not support retrieving group data for a user. Would you agree?

In the below code is there any way I can parameterize the sst part.

I tried with concat and other methods like set ssourl=url, sst = $ssourl but of no luck. And many other methods like using concat, Identifier.

I can't parameterize cert since it has limit of 256 bytes. Is there any way I can parameterize sst in the below code. Thanks

When I try to target the email element by class or id, it will throw an error:

I keep seeing the following block of code for registering SAML identity providers:

I have been using some tutorials to understand what properties must be set in the application.yml. There does not seem to be any documentation on the complete set of properties that can be set. Here's an example

We are new to Quarkus and are using it to build a simple Service Provider for Single sign on via SAML protocol with Okta as IdentityProvider. Unfortunately Quarkus only supports OpenId Connect (we could not find any guide for SAML protocol). However, Spring already has implemented this in spring-security-saml2-service-provider so we want to reuse this Spring component on Quarkus.

We only have 1 simple (spring rest) Controller on the project:

I'm using Tomcat 10 and eclipse to develop a J2E (or Jakarta EE) web application. I followed this tutorial (http://objis.com/tutoriel-securite-declarative-jee-avec-jaas/#partie2) which seems old (it's a french document, because i'm french, sorry if my english isn't perfect), but I also read the Tomcat 10 documentation.
The dataSource works, I followed instructions on this page (https://tomcat.apache.org/tomcat-10.0-doc/jndi-datasource-examples-howto.html#Oracle_8i,_9i_&_10g) and tested it, but it seems that the realm doesn't work, because I can't login successfully. I always have an authentification error, even if I use the right login and password.
I tried a lot of "solutions" to correct this, but no one works. And I still don't know if I have to put the realm tag inside context.xml, server.xml or both. I tried context.xml and both, but i don't see any difference.

My web.xml :