ForgeRock / openam-community-edition

Access Management - AuthN, AuthZ, SSO, Fedaration
https://forgerock.github.io/openam-community-edition/
124 stars 60 forks source link

HTTP-POST binding authrequest for sso not working in openam-federation-library 6.5.1.jar #62

Open sachinrathod284 opened 3 years ago

sachinrathod284 commented 3 years ago

openam-federation-library 6.5.1.jar lib having issue which they used incorrect jsp(("/saml2/jsp/autosubmitaccessrights.jsp")) in their SAMLUtils utility class of method postToTarget. https://bugster.forgerock.org/jira/browse/OPENIG-4266 - an issue already there but not able to find any jar 7.0.0 version? Can we update that postToTarget call to the old postToTarget method of the below link, so it will work? https://github.com/WrenArchiver/openam/blob/master/openam-federation/openam-federation-library/src/main/java/com/sun/identity/saml/common/SAMLUtils.java here it worked but introducing jsp creating an issue of 404 not found error.

If we used the below sequence in idp.xml and saved then it's failing due to JSP not found and incorrect code used in lib. SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://hostIP:8080/AM-eval-5.5.x/SSOPOST/metaAlias/idp31" SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="http://hostIP:8080/AM-eval-5.5.x/SSORedirect/metaAlias/idp31"

image