All geek questions in one place

SP can be obtained from several URLs, how to make all URLs work with IDP

I use Spring Security SAML so that my application runs as SP. I was able to complete the end-to-end solution. However, I ran into a problem when the user wants to access the application using multiple URLs. I configured my SP metadata with the Assertion mywebsite Consumer Service URL: 8080 / myapp / saml / SSO.

The user can also access the application through the fully qualified domain name mywebsite.fulldomainname: 8080 / MyApp /

If the user accesses the second URL, the SP application will be redirected to the IDP, which will return the first URL that will not give this message: InResponseToField of the response does not match the sent message

Even if I used EmptyStorageFactory, it will still fail in AbstractProfileBase.verifyEndpoint

How can i fix this?

0
source share
1 answer

SAML - - IDP SAML - , SP , - . SP URL-, , SAML . verifyEndpoint, SP URL-, , IDP .

Spring SAML ( URL-) . , , mywebsite:8080/myapp, mywebsite.fulldomainname:8080/myapp/ . entityId IDP.

7.2 > SAML - .

+1

Source: https://habr.com/ru/post/1539662/

More articles:


All Articles