saml-service-provider | SAML Service Provider | Authentication library

by ran-jit Java Version: Current License: GPL-3.0

X-Ray Key Features Code Snippets Community Discussions(6)Vulnerabilities Install Support

kandi X-RAY | saml-service-provider Summary

saml-service-provider is a Java library typically used in Security, Authentication applications. saml-service-provider has no bugs, it has no vulnerabilities, it has build file available, it has a Strong Copyleft License and it has low support. You can download it from GitHub.

SAML Service Provider (SSO)

Support

Quality

Security

License

Reuse

Support

saml-service-provider has a low active ecosystem.

It has 13 star(s) with 0 fork(s). There are 1 watchers for this library.

It had no major release in the last 6 months.

saml-service-provider has no issues reported. There are no pull requests.

It has a neutral sentiment in the developer community.

The latest version of saml-service-provider is current.

Quality

saml-service-provider has 0 bugs and 0 code smells.

Security

saml-service-provider has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

saml-service-provider code analysis shows 0 unresolved vulnerabilities.

There are 0 security hotspots that need review.

License

saml-service-provider is licensed under the GPL-3.0 License. This license is Strong Copyleft.

Strong Copyleft licenses enforce sharing, and you can use them when creating open source projects.

Reuse

saml-service-provider releases are not available. You will need to build from source code and install.

Build file is available. You can build the component from source.

saml-service-provider saves you 1993 person hours of effort in developing the same functionality from scratch.

It has 4383 lines of code, 98 functions and 30 files.

It has low code complexity. Code complexity directly impacts maintainability of the code.

Top functions reviewed by kandi - BETA

kandi has reviewed saml-service-provider and discovered the below as its top functions. This is intended to give you an instant insight into saml-service-provider implemented functionality, and help decide if they suit your requirements.

Configures the HttpSecurity instance
Add metadata generator
Create saml processing filter
Add filter chain
Bean context provider
Create key manager
Reads DOMains from file
Read domain suffix from XML
Update the metadata for the given tenant
Returns the domain name of a URL
Redirect the request to the internal redirection process
Internal redirection
Determines the target URL for the logout processing
Sets the host and tenant ID
Load user by SAML credential
Validates that the extended metadata provider has the given alias
The bean
Delegate to idp metadata provider
Display the metadata
Handle logout
Initializes the metadata cache
Update the entity metadata
Get the string value of a XML object
Request authentication token

Get all kandi verified functions for this library.

saml-service-provider Key Features

No Key Features are available at this moment for saml-service-provider.

saml-service-provider Examples and Code Snippets

No Code Snippets are available at this moment for saml-service-provider.

Community Discussions

Trending Discussions on saml-service-provider

Q: Azure AD B2C: SAML IDP initiated to OpenIdConnect, is it possible?

Mendix and Azure Ad B2C AuthRequest does not have assertion consumer service URL

Azure AD B2C as Oracle Fusion ERP IDP

Is there a way to change NameId in SAML custom policies?

Azure AD B2C as SAML IdP - RelayState Too Big

Azure B2C custom saml policy: Different claims per App

QUESTION

Q: Azure AD B2C: SAML IDP initiated to OpenIdConnect, is it possible?

Asked 2021-Apr-12 at 16:55

Trying to setup a custom policy in my Azure AD B2C tenant, I need to communicate to an external IDP using SAML IDP initiated, so client can navigate to their dashboard and click to "my app" that goes against my B2C tenant, and authenticates the user and gets send to my application using OpenIdConnect, it is required to me to get it integrated using SAML between my client's dahsboard and my B2C tenant

I used this article as based to create my custom policy using SAML. As SP initiated (through my app in azure ad b2c) works, but now I need to get it working using IDP initiated. Also found this idp-initiated sample, but here I got 2 problems:

This is setting up "my app" as SAML application (protocol in my RelyingParty, not what I want)
If I change that one to use "OpenIdConnect" which is desired in my RelyingParty I get the following error in my logs:

Policy '< myPolicyName >' in tenant '< myTenant >' does not have a supported relying party protocol"

So wondering in this point, is this something that's supported? I also got this unsupported-saml-modalities from the documentation and the last bullet point says:

Identity provider-initiated sign-on, where the identity provider is Azure AD B2C.

So, not really sure if what I'm trying to accomplish is something valid, any help?

...

ANSWER

Answered 2021-Apr-12 at 16:55

It’s not possible, an Idp initiated flow cannot respond to an OIDC relying party, only a SAML relying party.

Secondly, as the doc states, the IdP must be B2C, and will not work for an external IdP federated to B2C.

Source https://stackoverflow.com/questions/67061703

QUESTION

Mendix and Azure Ad B2C AuthRequest does not have assertion consumer service URL

Asked 2021-Jan-14 at 11:15

I try to get Azure AD B2C working on Mendix. We have it working with the normal Azure AD this is quite easy because all is done in a gui. For Azure AD B2C this is done in XML so a bit harder.

I have followed the next tutorials and this works all. https://docs.microsoft.com/nl-nl/azure/active-directory-b2c/custom-policy-get-started https://docs.microsoft.com/nl-nl/azure/active-directory-b2c/connect-with-saml-service-providers

If I try now to get it working with mendix I get the next error: Application registered corresponding to IssuerUri "https://xxxx.mendixcloud.com" in AuthRequest does not have assertion consumer service URL "https://xxx.mendixcloud.com/SSO/assertion" specified in its metadata.

In the SAMLApp1 Manifest, I put the Mendix Metadata URL. That is the only thing that I need to change so far I can find.

Can someone maybe help?

...

ANSWER

Answered 2021-Jan-14 at 11:15

In the SAMLApp1 Manifest you must change the identifierURI to https://xxxx.mendixcloud.com (issuer in the SAML request from mendix).

The metadata at 'https://xxx.mendixcloud.com/SSO/assertion' must have an ACS URL within it.

Source https://stackoverflow.com/questions/65710654

QUESTION

Azure AD B2C as Oracle Fusion ERP IDP

Asked 2020-Nov-26 at 05:43

We have a bunch of Oracle applications that we would like to integrate with Azure AD B2C IDP with SSO. Has anyone used Azure AD B2C as IDP for Oracle Fusion and similar apps? It is possible out of the box with Azure AD: https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/oracle-fusion-erp-tutorial but cannot find any documentation on B2C.

I understand we could do it the general way as we do by registering a SAML SP https://docs.microsoft.com/en-us/azure/active-directory-b2c/connect-with-saml-service-providers.

Would like to check with the experts on any better way for this or if there could be any drawbacks on this. Any help much appreciated.

...

ANSWER

Answered 2020-Nov-25 at 19:10

Yes, the SAML SP approach works.

I've done a number of these e.g. this.

The biggest problem is mapping the B2C user to the application. You would have to ensure that Oracle recognises the B2C user (NameID) as B2C users can have any email - not necessarily domain-joined.

Also, a B2C user can be a simple user name e.g. JoeB or a phone number depending on how you set it up.

Source https://stackoverflow.com/questions/64999357

QUESTION

Is there a way to change NameId in SAML custom policies?

Asked 2020-Aug-13 at 17:33

I'm trying to change to NameID for the user email in custom policies, but can't figure out how. We started with the SAML tutorial on Microsoft.

Email in TrustFrameworkBase.xml:

...

ANSWER

Answered 2020-Aug-13 at 17:03

If you update your RelyingParty definition to the following that should output the email in the NameId with a format of urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress:

Source https://stackoverflow.com/questions/63399337

QUESTION

Azure AD B2C as SAML IdP - RelayState Too Big

Asked 2020-Mar-17 at 00:55

We're trying to use AWS Cognito user pool as SP and Azure AD B2C as IdP per these instructions. Unfortunately, we haven't had any success yet. The SAML request is failing. The SAML response from Azure B2C has the following status message, indicating the RelayState content from AWS Cognito is too big (> 1000 byte max):

...

ANSWER

Answered 2020-Mar-17 at 00:55

This was resolved by increasing the RequestContextMaximumLengthInBytes in the Relying Party (RP) file. Although a value of 2000 still resulted in failure, 4000 was large enough to make the error go away.

Source https://stackoverflow.com/questions/60647109

QUESTION

Azure B2C custom saml policy: Different claims per App

Asked 2020-Feb-24 at 17:05

I followed this manual to register SAML to my azure b2c: https://docs.microsoft.com/en-us/azure/active-directory-b2c/connect-with-saml-service-providers

With this I am able to define SAML claims in my new TechnicalProfile with for example

...

ANSWER

Answered 2020-Feb-24 at 17:05

If you are connecting 3 SAML Relying Parties, you would have 3 Application Registrations, and 3 Relying Party technical profiles as part of your Custom Policy. Each Relying party section would have the required claims mappings.

Source https://stackoverflow.com/questions/60325938

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install saml-service-provider

You can download it from GitHub.
You can use saml-service-provider like any standard Java library. Please include the the jar files in your classpath. You can also use any IDE and you can run and debug the saml-service-provider component as you would do with any other Java program. Best practice is to use a build tool that supports dependency management such as Maven or Gradle. For Maven installation, please refer maven.apache.org. For Gradle installation, please refer gradle.org .

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: