Spring Boot SAML 2.0 - SP with JBoss EAP

Question

I need to integrate a Spring Boot backend (2.3.x) with SAML 2.0 authentication (for SSO purpose), implementing the Service Provider side, and then get the User object in the java backend with the various attributes valued by the Identity Provider (name, surname, roles etc...) remote and already existing (IOM / OAM). The Spring Boot backend is deployed on JBoss EAP 7.3 (middleware), and for now, I'm following the official RedHat doc to use the PicketLink library. I have already added the "plugin" on JBoss and now I need to configure the SP on the server, but I'm not sure what parameters to enter. For this, I ask for support from those who have already met this need.

In practice, I need to achieve these two goals:

1. configure my backend as a Service Provider to an existing Identity Provider (Oracle OIM / OAM)
2. understand how to retrieve the metadata of the user object from the java backend, and then use them within the application (I specify that the frontend is not implemented with Spring, like Thymeleaf, but with Angular)

At the moment I'm trying to use PicketLink, but it's not mandatory; if you know of other solutions, that's fine.

Many thanks in advance!

Answer 1

If you need just authentication thru SAML you can follow this tutorial: https://developer.okta.com/blog/2017/03/16/spring-boot-saml . If you need database + SAML authentication you can follow this tutorial for authentication with SAML (Okta provider) https://developer.okta.com/blog/2020/10/14/spring-security-saml-database-authentication .