SAML 2.0 Login with Spring Security
The SAML 2.0 Login functionality empowers an application to function as a SAML 2.0 relying party. This enables users to log in to the application using their pre-existing accounts with a SAML 2.0 Asserting Party, such as ADFS, Okta, and other IdPs.
Important note
The implementation of SAML 2.0 Login utilizes the Web Browser Single Sign-On (SSO) Profile, as outlined in the SAML 2 Profiles Specification: https://groups.oasis-open.org/higherlogic/ws/public/document?document_id=35389#page=15.
To begin our exploration of SAML 2.0 relying party authentication in the context of Spring Security, we observe that Spring Security guides the user to a third party for authentication. This is accomplished through a sequence of redirections:
Figure 10.2 – Redirecting to asserting party authentication
Let’s delve deeper into this sequence of SAML redirections:
- Initially, a user submits an unauthenticated...
