Spring Community Forums - SAML http://forum.springsource.org/ Spring Security SAML extension en Wed, 19 Jun 2013 18:31:04 GMT vBulletin 60 http://forum.springsource.org/images/misc/rss.png Spring Community Forums - SAML http://forum.springsource.org/ memory leaks on 1.7 xerces http://forum.springsource.org/showthread.php?138310-memory-leaks-on-1-7-xerces&goto=newpost Mon, 03 Jun 2013 10:56:20 GMT On tomcat 7 + jdk 1.7 org.apache.xerces.jaxp.datatype.DatatypeFactoryImpl is responsable of blocking the gc of... On tomcat 7 + jdk 1.7
org.apache.xerces.jaxp.datatype.DatatypeFactoryImp l is responsable of blocking the gc of org.apache.catalina.loader.WebappClassLoader.

As JDK 7 comes with a JAXB implementation, do you think it could be better to import spring-security-saml2-core like this in a webapp ?

compile ("org.springframework.security.extensions:sprin g-security-saml2-core:$springSecuritySamlVersion")
{
exclude group: "org.slf4j", module: "jcl-over-slf4j"
exclude group: "org.slf4j", module: "log4j-over-slf4j"
exclude group: "org.apache.xerces", module: "xml-apis"
exclude group: "org.apache.xerces", module: "serializer"

---> exclude group: 'xerces', module: 'xercesImpl'
---> exclude group: 'xml-apis', module: 'xml-apis'
}

seems to working fine without it. ]]> SAML aleale http://forum.springsource.org/showthread.php?138310-memory-leaks-on-1-7-xerces Multiple IDPs configured in runtime http://forum.springsource.org/showthread.php?138194-Multiple-IDPs-configured-in-runtime&goto=newpost Fri, 31 May 2013 10:08:45 GMT Hi, I need to support multiple IDPs configured in runtime, metadata XML is saved to DB. IDP should be selected automatically depending on passed... Hi,

I need to support multiple IDPs configured in runtime, metadata XML is saved to DB.
IDP should be selected automatically depending on passed HTTP param. So far I I'm considering something like this

Code:
public class SAMLContextProvider extends SAMLContextProviderImpl  {


    protected void populatePeerEntityId(SAMLMessageContext context) {
        HTTPInTransport inTransport = (HTTPInTransport) context.getInboundMessageTransport();

        String key= inTransport.getParameterValue("key");
        String peerId= database.getPeerId(key); // get peerId by passed HTTP param

        context.setPeerEntityId(peerId);

        context.setPeerUserSelected(true);
        context.setPeerEntityRole(IDPSSODescriptor.DEFAULT_ELEMENT_NAME);

    }

}
Now I need to figure out how to populate corresponding metadata into context.

It looks like I also need to customize or override MetadataManager and/or create custom MetadataProvider. Though the approach is not obvious.

I would appreciate any hints. ]]> SAML smbdy http://forum.springsource.org/showthread.php?138194-Multiple-IDPs-configured-in-runtime IDP initiated SSO http://forum.springsource.org/showthread.php?138189-IDP-initiated-SSO&goto=newpost Fri, 31 May 2013 09:49:13 GMT Hi, I have started looking into Spring Security SAML extension in order to implement a rather simple (?) business case, but I guess I need some... Hi,

I have started looking into Spring Security SAML extension in order to implement a rather simple (?) business case, but I guess I need some assistance in order to implement it. Our business case is that we have a partner (IDP in our case) who we trust and would like to be able to do (IDP initiated) SSO into our salessystem.

I have got the Spring SAML example working and I have started building a simple testclient acting as IDP that will initiate an SSO on the Spring example app.

How do I strip the example security configuration down to the bare essentials where it will just accept a SAML response, leaving no loose ends?

Best regards,
-ttjarl ]]> SAML ttjarl http://forum.springsource.org/showthread.php?138189-IDP-initiated-SSO Import public keys http://forum.springsource.org/showthread.php?138098-Import-public-keys&goto=newpost Wed, 29 May 2013 13:53:34 GMT Hi, My web application is integrated with Spring Security - SAML extenstion. The user is authenticated by an IDP, which its public certificate is... Hi,

My web application is integrated with Spring Security - SAML extenstion. The user is authenticated by an IDP, which its public certificate is embedded in its metadata. How can I import the IDP certificate/public key into my web application's keystore? Please suggest me.

patch ]]> SAML patch_78 http://forum.springsource.org/showthread.php?138098-Import-public-keys Filter security exception http://forum.springsource.org/showthread.php?138077-Filter-security-exception&goto=newpost Wed, 29 May 2013 08:00:43 GMT My tomcat server show this error, but I can login and do the SSO. I don't know whether it is a critical error or not? I check my SAML setting and everything is OK. I cannot identify what is the problem and what cause this error. Please, help me identify the problem.

Code:
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:305)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:330)
at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:118)
at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:84)
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:113)
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
at org.springframework.security.web.session.SessionManagementFilter.doFilter(SessionManagementFilter.java:103)
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
at org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:113)
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
at org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:54)
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
at org.springframework.security.web.savedrequest.RequestCacheAwareFilter.doFilter(RequestCacheAwareFilter.java:45)
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
at org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:186)
at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:166)
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:87)
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
at org.springframework.security.saml.metadata.MetadataGeneratorFilter.doFilter(MetadataGeneratorFilter.java:78)
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
at org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:192)
at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:160)
at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:346)
at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:259)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:222)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:123)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:472)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:99)
at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:936)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407)
at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1004)
at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:589)
at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:312)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603)
at java.lang.Thread.run(Thread.java:722)
]]> SAML duybinh0208 http://forum.springsource.org/showthread.php?138077-Filter-security-exception Proxy problem http://forum.springsource.org/showthread.php?137812-Proxy-problem&goto=newpost Thu, 23 May 2013 07:29:50 GMT Hi, I have started to look into the example and try to figure out how the SAML extension works. I have managed to build and deploy the example... Hi,

I have started to look into the example and try to figure out how the SAML extension works.

I have managed to build and deploy the example into WebLogic 12c, but I am not able to figure out how to make the httpMetaDataProvider access the idp-meta.xml hosted on idp.ssocircle.com through our firewall. It does not seem like it obeys the -Dhttp.proxyHost= setting.

Is there any way to configure it to go through our proxy server?

-ttjarl ]]> SAML ttjarl http://forum.springsource.org/showthread.php?137812-Proxy-problem Spring SAML Memory consumption http://forum.springsource.org/showthread.php?137808-Spring-SAML-Memory-consumption&goto=newpost Thu, 23 May 2013 04:54:33 GMT HI, We have a standalone spring saml web application acting as a SAML service provider. Trials runs indicates high Tomcat memory utilisation by the... HI,
We have a standalone spring saml web application acting as a SAML service provider. Trials runs indicates high Tomcat memory utilisation by the web application. Seeing around ~0.18 MB per user session after completing SAML authentication.

Anyone see the above as an abnormality or is this expected? Any documents available to configure spring security to tune memory?

Thanks
Joe ]]> SAML joesaby http://forum.springsource.org/showthread.php?137808-Spring-SAML-Memory-consumption SAML Authentication integration with CAS http://forum.springsource.org/showthread.php?137802-SAML-Authentication-integration-with-CAS&goto=newpost Wed, 22 May 2013 21:19:36 GMT We have a suite of existing web applications(each being a seperate war file) that have SSO enabled amongst themselves through CAS using Spring... We have a suite of existing web applications(each being a seperate war file) that have SSO enabled amongst themselves through CAS using Spring Security.

Now we have a new requirement where in third party users should be able to access these applications using their own domain Id's - This would be a IDP Initiated SSO using SAML.

Can we integrate the SAML authentication with the current SSO(CAS based) using SAML Extension? If yes, then how can we integrate the two, where in once the SAML authentication is done, a valid CAS service ticket creation be triggered.

I am new to CAS, though have some experience with SAML extension. I would appreciate if some body could please guide me on this. ]]> SAML Ankurr http://forum.springsource.org/showthread.php?137802-SAML-Authentication-integration-with-CAS Spring security SAML and SAML attributes http://forum.springsource.org/showthread.php?137775-Spring-security-SAML-and-SAML-attributes&goto=newpost Wed, 22 May 2013 11:37:11 GMT I need to integrate a spring application with an existing SAML IDP requesting some custom SAML attributes to be set in the SAML authentication... I need to integrate a spring application with an existing SAML IDP requesting some custom SAML attributes to be set in the SAML authentication request.

I've tried with the spring security SAML extension but I couldn't find a way to set SAML attributes in the SAML authentication request.

Can someone give me a hint?

Thanks ]]> SAML chiodonia http://forum.springsource.org/showthread.php?137775-Spring-security-SAML-and-SAML-attributes