search

ulisesbocchio / spring-boot-security-saml

spring-security-saml integration with Spring Boot
MIT License
157 stars 72 forks source link

Force HTTPS schema in final [302 - Redirect] login #97

Open JuMp3 opened 3 years ago

JuMp3 commented 3 years ago

Is it possible "to force" the hostname schema in the final login redirect, when the login flow ends on SP? I noticed that now, when the application (SP) parse the SAMLReponse of IdP, finally, it performs a redirect on itself but in HTTP, instead I would like to force in HTTPS. I tried setting the parameter, without success:

.and().sso().defaultSuccessURL("https://my-hostname.it/context-root")

Thanks for your time.

DineshNO commented 1 year ago

@JuMp3 were you able to figure out this issue. I am facing a similar issue where redirect is happening on a http instead of https