gtiwari333 / spring-security-saml-test-identity-provider-and-service-provider

SAML Identity Provider and Service Provider for testing purpose. Powered by Spring Boot.

Spring Security SAML example

This project demonstrates both IDP initiated and SP initiated SSO flows.

Modules

Identity Provider

• Uses Spring Boot 2 identity provider (https://github.com/spring-attic/spring-security-saml/tree/develop-3.0)
• It contains a basic identity provider application with the ability to define custom user attributes. This test IDP can be used to test any local SAML service provider implementation.
• Requires JDK11

Service Provider

• Uses Spring Boot 2 service provider (https://github.com/spring-attic/spring-security-saml/tree/develop-3.0)
• This is a basic service provider with custom IDP select page and a basic home page .
• Requires JDK11

Service Provider SB3

• Uses Spring Boot 3 service provider with spring-security-saml2
• https://docs.spring.io/spring-security/reference/servlet/saml2/login/overview.html#servlet-saml2login-minimaldependencies
• This is a basic service provider with custom IDP select page and a basic home page .
• Requires JDK17+

How to Test

• Both module are Spring Boot applications. Run the applications and open either SP and IDP to initiate the authentication. Watch out for the redirection being performed by SAML.

  • http://localhost:8081/this-is-idp

  • http://localhost:8082/this-is-sp

  • http://localhost:8083/this-is-sp2

Look at UserUtils class to generate custom SAML attributes

• Usernames: user002@email, user003@email
• password: pass

generate a private key with the correct length

openssl genrsa -out pk.key 1024

generate corresponding public key

openssl pkcs8 -topk8 -inform pem -in pk.key -outform pem -nocrypt -out pk.pem

optional: create a self-signed certificate

openssl req -new -x509 -key pk.pem -out cert.pem -days 360

spring-security-saml-test-identity-provider-and-service-provider's Issues

Custom Attributes not working

The Custom Attribute are not working. It is because of different method signature of the the overridden getAssertion method.

I want to configure sso url.

In IDP , application yaml file, there is no option to configure sso url where the service providers will land to the login page of idp?.

The following error occurred while the server was running.

Failed to bind properties under 'saml2.identity-provider' to org.springframework.security.saml.provider.identity.config.LocalIdentityProviderConfiguration:

Property: saml2.identity-provider.sign-assertions
Value: "true"
Origin: class path resource [application.yml] - 37:22
Reason: java.lang.reflect.InaccessibleObjectException: Unable to make field private final java.lang.String java.lang.Enum.name accessible: module java.base does not "opens java.lang" to unnamed module @7526515b

---

Failed to bind properties under 'saml2.service-provider' to org.springframework.security.saml.provider.service.config.LocalServiceProviderConfiguration:

Property: saml2.service-provider.name-ids[1]
Value: "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"
Origin: class path resource [application.yml] - 45:9
Reason: java.lang.reflect.InaccessibleObjectException: Unable to make field private final java.lang.String java.lang.Enum.name accessible: module java.base does not "opens java.lang" to unnamed module @78e4deb0

can use implement same IDP and SP in spring MVC project

Respected @gtiwari333,

It was great to work with the custom IDP and SP code that you have provided on GitHub, I need some help with that how to implement the same thing in the spring MVC project.

Any leads will be appreciated.
Thanks in advance