SAML 2 Support

SAML is predominantly employed as a web-based authentication mechanism, relying on the browser agent to facilitate the authentication process. In broad terms, the authentication flow of SAML can be outlined as follows.

Spring Security provides comprehensive SAML 2 support. This section discusses how to integrate SAML 2 into your Servlet-based application.

Starting from 2009, support for relying parties has been available as part of an extension project. In 2019, efforts were initiated to integrate this support into the core of Spring Security. This mirrors a similar process initiated in 2017 for incorporating Spring Security’s OAuth 2.0 support.

This chapter will explore the following subjects:

• Fundamental aspects of the SAML protocol
• Establishing your SAML 2 Login using Spring Security
• Acquiring the SAML 2 Authenticated Principal
• Parsing and generating SAML 2.0 metadata
• Tailoring authorities using Spring Security SAML
• Executing...