OKTA SSO SAML响应

Question

Trying to setup a SSO for a Java web application built with Spring MVC. I've registered my application to an OKTA server, got a Metadata URL and a SignOn URL. I'm using the SignOn URL from my application, authenticating with success, then a POST request is made with some form data that include a SAML Response object.

What should be the next step from here? I've decoded the SAML response, and now from my understanding I need to get a token or a session ID that I'll need to use to my further requests to the OKTA server.

Edit 1: Ran the spring-boot-saml-example , the authentication works as expected. But, when trying to get the current session using OKTA Session API from the Spring application, an HTTP 404 code is returned. Fetching the current session using the browser work fine.

Answer 1

Take a look at this blog post , this example uses Spring Security and an Okta SAML app . Take a look at that, and if that doesn't help let us know.

Answer 2

You can use the spring-webmvc-pac4j security library which provides SAML authentication for Spring MVC (Boot) app.

Configuration is straightfoward for Okta like for any other SAML identity provider: https://github.com/pac4j/spring-webmvc-pac4j-demo/blob/master/src/main/webapp/WEB-INF/demo-servlet.xml#L44 + https://github.com/pac4j/spring-webmvc-pac4j-demo/blob/master/src/main/webapp/WEB-INF/demo-servlet.xml#L214