Something went wrong during the authentication process. about spring-boot-security-saml-sample

[satishagrawal03]

It worked when starting the flow from "http://localhost:8080/" instead of "http://localhost:8080/spring-boot-security-saml-sample".

[chriswhite199]

It's probably worth noting somewhere in the docs exactly how to setup ssocircle - i've been recently following along myself and there were a few non-obvious things that i had to do:

1. Amend the com.vdenotaris.spring.boot.security.saml.web.config.WebSecurityConfig#metadataGenerator method call to setEntityId to something unique - the value provided is already registered by the author of this repo in ssocircle, so for example i amended to com:vdenotaris:spring:sp:chriswhite199
2. In ssocircle.com, under the manage metadata section, add a new service provider and set the FQDN to your new entityId, and copy the generated SP Metadata XML into the text field
3. For me (at least) i also had to run the app in https, otherwise you get errors relating the message response from ssocircle not corresponding to the sent message (this is because there is a new http session in the browser when switching between http-localhost and https-ssocircle):

Caused by: org.opensaml.common.SAMLException: InResponseToField of the Response doesn't correspond to sent message a13301cba7h5dj8c2bj5d9cf2bj78jh

To run in HTTPS mode, you'll want to add these to your application.properties:

server.port=8443
server.ssl.key-store=classpath:saml/samlKeystore.jks
server.ssl.key-store-password=nalle123
server.ssl.keyStoreType=JKS
server.ssl.keyAlias=apollo