英文:
IdP server over spring boot SSO
问题
我正试图在Spring Boot上实现自己的IdP。我按照Spring Security SAML的文档进行操作，以便对此有一个清晰的理解，但是没有关于此的良好示例。我找到的唯一部分是：
> 您可以使用URL https://idp.ssocircle.com:443/sso/saml2/jsp/idpSSOInit.jsp?metaAlias=/ssocircle&spEntityID=replaceWithUniqueIdentifier 来测试由IDP初始化的单点登录，替换为在securityContext.xml中配置为entityId的服务提供程序标识符。可以通过参数RelayState向您的SP提供发送的relayState数据。
但是这个示例是基于ssocircle作为IdP，示例Java项目作为SP。因此，我看不到任何关于ssocircle配置（我需要哪些端点和其他配置），真的找不到任何关于这方面的好示例。在某些部分，我阅读到使用Spring Security SAML依赖项，我可以使我的应用程序充当IdP，然后我重新阅读了整个文档，我注意到这个：
> 本章提供了启用您的应用程序充当服务提供商并使用SAML 2.0协议与身份提供商进行交互所需的基本信息。在本指南的后面部分，您可以找到有关详细配置选项以及此组件支持的其他用例的信息。
基本上，这个文档并未涵盖我所尝试的内容，而且我现在甚至不知道这个依赖项是否能帮助我实现目标，或者我是否需要转向另一个类似Shibboleth项目的库。您之前遇到过这个问题吗？
英文:
I'm trying to implement my own IdP on Spring boot. I followed the documentation of Spring security SAML to give me a clear idea but there are no good examples of this. The only part I found is
> You can test IDP initialized single sign-on with URL https://idp.ssocircle.com:443/sso/saml2/jsp/idpSSOInit.jsp?metaAlias=/ssocircle&spEntityID=replaceWithUniqueIdentifier, after replacing the service provider identifier with the one configured as entityId in your securityContext.xml. It is possible to provide relayState data sent to your SP with parameter RelayState.
But this example bases on ssocircle is the IdP and the sample Java project is the SP. So I can't see any of the ssocircle configurations (what endpoints I need and other configs) and really can't find any good example of this. In some part I read that with the Spring security SAML dependency I can make my application act as an IdP, then I reread the full document I noticed this
> This chapter provides essential information needed to enable your application to act as a service provider and interact with identity providers using SAML 2.0 protocol. Later in this guide you can find information about detailed configuration options and additional use-cases enabled by this component.
Basically, this document does not cover what I'm trying to do, and right now I don't even know if this dependency will help me to reach my goal or I will need to move to another library like Shibboleth project. Have you faced this issue before?
专注分享java语言的经验与见解，让所有开发者获益！
评论