search

spring-attic / spring-security-saml

SAML extension for the Spring Security project
Other
419 stars 484 forks source link

Does spring saml supports Multiple Signing Keys for Multiple IDPs? #494

Closed kaushalsingh861 closed 4 years ago

kaushalsingh861 commented 4 years ago

I have successfully added multiple IDPs for my application, however In case every IDP has its own signing key, the application fails to authenticate via that IDP. All the keys are present in the local keystore. Turns out, the Spring SAML only picks the Signing key that is defined in the extended metadata of the SP.

Is there a way we can define which key to use for authenticating via given IDP?

jzheaux commented 4 years ago

Thanks for getting in touch, @kaushalsingh861, but it feels like this is a question that would be better suited to Stack Overflow. We prefer to use GitHub issues only for bugs and enhancements. Feel free to update this issue with a link to the re-posted question (so that other people can find it) or add more detail if you feel this is a genuine bug.

To answer briefly, though, this project is in maintenance mode, but the new support built into Spring Security is active and does support this use case.

If you are stuck using this legacy project, I think that @chubbard has some experience that may prove useful.