It appears the new spring security 6 library only allows you to consume saml assertions rather than generating the assertion as the IDP. Most articles and tutorials suggest using a pre-existing IDP such as Okta to generate the saml assertion etc. I find it hard to believe spring security does not offer the same features as spring-security-saml2-core version 2.0.0.M31? Is that assumption correct?
See a similiar post from 2021 here Posing this question in 2024 to see if anything has changed in the ecosystem.
Are there any alternatives we can use with java jdk21 and spring security 6 which can generate the saml assertion? We currently extend the SamlServerConfiguration class from 2.0.0.M31. Is our best option to spin up a shibboleth IDP?
Tried creating a custom assertion generator service using opensaml 4.3.0 yet there are combability issues between the use of objects such as QName which are apart of the javax package as opposed to jakarta. We cannot downgrade our java version to jdk 11. What would be the best solution to maintain our app as the IDP?
user25066877 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.