This project implements a Spring Boot Web application that demonstrates Single Sign On using the SAML 2.0 WebSSO profile. It builds on Vincenzo De Notaris's Spring Boost-based Spring Security SAML Extension Sample Service.
- Besides SSOCircle, saml2sp supports a locally running WSO2 Identity Server (Version 5.0.0) as an alternative IdP.
- Role information in the SAML credential attributes is used to determine the Spring Security authorities (or roles) of the logged in user. (If there are no supported roles in the the SAML credential, then the USER role is assumed by default.)
- The various pages of the Web application have different access control requirements. The pages are accessible:
- Without any constraints by everybody;
- By logged in users only (no matter their roles);
- By anonymous users only (i.e., not logged in users);
- By users in the USER and ADMIN roles only, respectively;
- By no-one.
The build of saml2sp requires Maven 3.x and Oracle JDK 7. (To be precise, saml2sp can probably be built with Java 8 and / or OpenJDK as well. But version 5.0.0 of WSO2's Identity Manager still requires Oracle's Java 7 implementation.)
For building saml2sp, you only need to call mvn clean install in the project's top level directory.
This will produce an executable JAR file in the target directory.
The Web application is deployed in an embedded Tomcat inside the JAR file. When you start it by calling
java -jar saml2sp-0.0.1-SNAPSHOT.jar
then the embedded Tomcat will serve the application at http://localhost:8080/ .