Cwikius-Spring/spring-security
1
0
Fork 0
mirror of synced 2026-08-05 17:57:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

SAML 2.0 SP Metadata Endpoint Support

Browse Source 
Issue gh-8693
This commit is contained in:
Jakub Kubrynski
2020-06-30 23:06:32 +02:00
committed by Josh Cummings
parent 31bae546e2
commit 8a355240bc
14 changed files with 518 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/manual/src/docs/asciidoc/_includes/servlet/saml2/saml2-login.adoc
+3 -15
View File
@@ -61,8 +61,7 @@ the IDP sends an assertion to the SP.
1. Mappings assertion conditions and attributes to session features (timeout, tracking, etc)
2. Single logout
3. Dynamic metadata generation
4. Receiving and validating standalone assertion (not wrapped in a response object)
3. Receiving and validating standalone assertion (not wrapped in a response object)
[[servlet-saml2-javaconfig]]
=== Saml 2 Login - Introduction to Java Configuration
@@ -200,19 +199,8 @@ credentials on all the identity providers.
[[servlet-saml2-serviceprovider-metadata]]
==== Service Provider Metadata
The Spring Security SAML 2 implementation does not yet provide an endpoint for downloading
SP metadata in XML format. The minimal pieces that are exchanged
* *entity ID* - defaults to `+{baseUrl}/saml2/service-provider-metadata/{registrationId}+`
Other known configuration names that also use this same value
** Audience Restriction
* *single signon URL* - defaults to `+{baseUrl}/login/saml2/sso/{registrationId}+`
Other known configuration names that also use this same value
** Recipient URL
** Destination URL
** Assertion Consumer Service URL
* X509Certificate - the certificate that you configure as part of your {SIGNING,DECRYPTION}
credentials must be shared with the Identity Provider
The Spring Security SAML 2 implementation does provide an endpoint for downloading
SP metadata in XML format. The provider is mapped to: `+{baseUrl}/saml2/service-provider-metadata/{registrationId}+`
[[servlet-saml2-sp-initiated]]
==== Authentication Requests - SP Initiated Flow