CODEWITHSUNDEEP
springsingle-sign-onadfs2.0spring-saml
Vikas Shivashankara
Vikas Shivashankara

Reputation: 177

use of samlKeystore.jks in Spring SAML extension

I am new to SSO and Sping SAML extension. i have implemented Spring SAML extension into our application where our application acts as a SP. i have following question related to our requirement.

1) I would like to understand the use of samlKeystore.jks in Spring saml extension 2) I would like to know if we can skip the use of samlKeystore.jks in any manner. Basically the reason for this the client can give us information on Just the meta data and nothing apart from that.if we are using samlKeystore.jks do we need anything else

Upvotes: 1

Views: 1990

Answers (2)

Vladimír Schäfer
Vladimír Schäfer

Reputation: 15533

The keystore is used for storage of private certificates used to digitally sign messages created by the Service Provider and decrypting of messages sent from Identity Providers.

Spring SAML currently requires you to have at least a default key available, even in case it won't get used.

Upvotes: 0

Bernhard Thalmayr
Bernhard Thalmayr

Reputation: 2744

If you don't need to sign SAML protocol message or encrypt SAML assertions you don't need the keystore. However some SAML Bindings mandates or at least highly recommend to sign so that the protocol messages are not tampered with at the user agent.

Upvotes: 1

Related Questions