Search code examples
javaspring-bootservicesaml-2.0spring-saml

Implementing a SAML 2.0 Service Provider using Spring Boot


I wanted to implement a Spring Boot SAML2.0 service provider. This service provider doesn't need to communicate to IDP as it will only receive an assertion object. My questions are:

  1. How can I implement a spring boot SAML2.0 service provider that only accept assertion objects. Get the principal information and redirect to a web application url with the information in the body?
  2. What is Assertion Consumer Service URL? How can I provide it with the created SP?

Thank you in advance.


Solution

  • So, I solved my problem by creating a full SAML service provider using spring SAML extension. I was not knowledgeable with SAML service provider so I thought I could just create a code that would expose ACS URL and that's it. I configured the ACS url by setting up the SP base entity url and configured SAML Web SSO Processing filter.