search

spring-attic / spring-security-saml-dsl

Spring security okta dsl.
MIT License
43 stars 61 forks source link

Unable to login #41

Open mksmanjit opened 7 years ago

mksmanjit commented 7 years ago

Hi Team,

I followed all the step mentioned but when i run my application and hit https://localhost:8443/ then browser popped up asking Authentication but when i put my Okata userName and password it is not authenticating, not sure what is the problem. I have below points: 1) Why my browser popping up with authentication rather than redirecting it to the Okata server. 2) what should be the userName and password for this popping authentication.

image

rwinch commented 7 years ago

You should not be getting a popup dialog. What is the HTTP response?

mksmanjit commented 7 years ago

able to run and now it is reaching to the IDP server page after changing package structure earlier my DemoApplication.java is in com.example.demo and SecurityConfiguration.java and MvcConfig.java in com.example package.

now all three files are in the same package com.example..

but now i am getting another error:

Caused by: org.opensaml.common.SAMLException: Response doesn't have any valid assertion which would pass subject validation at org.springframework.security.saml.websso.WebSSOProfileConsumerImpl.processAuthenticationResponse(WebSSOProfileConsumerImpl.java:229) at org.springframework.security.saml.SAMLAuthenticationProvider.authenticate(SAMLAuthenticationProvider.java:82) ... 27 more Caused by: org.opensaml.common.SAMLException: Local entity is not the intended audience of the assertion in at least one AudienceRestriction at org.springframework.security.saml.websso.WebSSOProfileConsumerImpl.verifyAudience(WebSSOProfileConsumerImpl.java:506) at org.springframework.security.saml.websso.WebSSOProfileConsumerImpl.verifyAssertionConditions(WebSSOProfileConsumerImpl.java:458) at org.springframework.security.saml.websso.WebSSOProfileConsumerImpl.verifyAssertion(WebSSOProfileConsumerImpl.java:303) at org.springframework.security.saml.websso.WebSSOProfileConsumerImpl.processAuthenticationResponse(WebSSOProfileConsumerImpl.java:214) ... 28 more

mksmanjit commented 7 years ago

Whitelabel Error Page

This application has no explicit mapping for /error, so you are seeing this as a fallback.

Thu Sep 21 12:04:30 IST 2017 There was an unexpected error (type=Unauthorized, status=401). Authentication Failed: Error validating SAML message