rwinch / spring-security-saml2-okta

A simple example of using okta for authentication with Spring Security SAML and Spring Boot.

Setup

JDK 7+ Installed

The application requires you have JDK7+ installed on your computer.

Okta Setup

Create an Okta developer account if you do not already have one. You will receive an email to instructions for setting up your test identity provider.

Follow the directions under the Configuring Okta to work with Spring Security SAML. The difference is that you will use the following values:

• Single sign on URL http://localhost:8080/saml/SSO

• Audience URI (SP EntityID) http://localhost:8080/saml/metadata

• Enable Single Logout

  • Single Logout URL http://localhost:8080/saml/SingleLogout

  • SP Issuer http://localhost:8080/saml/metadata

  • Signature Certificate - Upload /security/SingleLogout.crt

Spring Security SAML Configuration

• Open src/main/resources/application.properties

• Enter the Identity Provider metadata from Okta Setup as the value for security.saml.idp.metadata. For example, if the Identity Provider metadata was https://example.okta.com/app/abc0defghijK1lmN23o4/sso/saml/metadata, your file should look like:

src/main/resources/application.properites

# TBD Enter the Identity Provider metadata link from Okta
security.saml.idp.metadata=https://example.okta.com/app/abc0defghijK1lmN23o4/sso/saml/metadata

Running the Sample

You can now run the sample using:

Run on OSX or *nix

$ ./mvnw spring-boot:run

Run on Windows

$ .\mvnw.cmd spring-boot:run

Once the application starts:

• Visit http://localhost:8080/

Authenticating with a local account

You can authenticate with a local account using:

• Username user

• Password password

• Press Log in

You should now see the user name displayed.

Logging Out

You can log out using the Log Out button. This will trigger Single Logout process

Authenticating with Okta

You can perform Single Sign On with Okta:

• Select Okta radio button

• Press Start single sign-on button

You should now see the user name displayed

spring-security-saml2-okta's Issues

Spring Boot and Spring Security SAML

Not a real issue.
Just found this sample for SAML+Okta and wanted to share this other one with the same purpose. It uses a custom built plugin to avoid the boiler plate and xml config of Spring Security SAML. Pointers are welcome!

An Authentication object was not found in the SecurityContext

Hi Team,

I am facing this issue while runnig this project. I have followed all the steps and configured with okta account. I am able to login and logout using Okta account. But this error comes in the logs. Whenever i start the project and hit localhost:8080 this error occurs. Also i want to integrate it with WSO2 identity server and WSO2 identity server will have multiple identity providers associated with this. I have added WSO2 metadata and able to redirect it to Okta. But the same error occurs and i got redirected to login page again without other errors.

The error is like "org.springframework.security.authentication.AuthenticationCredentialsNotFoundException: An Authentication object was not found in the SecurityContext"