Announcement Announcement Module
No announcement yet.
IDP initiated SSO Page Title Module
Move Remove Collapse
Conversation Detail Module
  • Filter
  • Time
  • Show
Clear All
new posts

  • IDP initiated SSO


    I have started looking into Spring Security SAML extension in order to implement a rather simple (?) business case, but I guess I need some assistance in order to implement it. Our business case is that we have a partner (IDP in our case) who we trust and would like to be able to do (IDP initiated) SSO into our salessystem.

    I have got the Spring SAML example working and I have started building a simple testclient acting as IDP that will initiate an SSO on the Spring example app.

    How do I strip the example security configuration down to the bare essentials where it will just accept a SAML response, leaving no loose ends?

    Best regards,

  • #2

    In order to only leave the SSO functionality you can take out at least the following beans (+ remove them from all places where they're referenced - e.g. samlFilter): samlEntryPoint, samlLogoutFilter, metadataDisplayFilter, samlWebSSOHoKProcessingFilter, samlLogoutProcessingFilter, samlIDPDiscovery. This should leave your instance with bare minimum of processing on incoming requests.

    Cheers, Vladi