Develop Reference

Integrate Spring Security SAML2 Extension in Strut2 web application

I have a struts2 web application which use Spring Security SAML2 (Spring source) http://springsource.org/spring-security-saml) to get authentication of users in an external system AD FS.
I use spring-security-saml war as intermediary between Struts2 and external system AD FS for use the SAML2 protocol.
We currently have two different "Service Providers":
Struts2 application that does not directly use the SAML2 protocol but delegates it to the "spring-security-saml2-war" by starting on a particular route/url of this
"spring-security-saml2-war" which exactly follows the "SP-initiated" SAML2 flow I reported below and which at the end goto to my login Success Action of Struts2
"SP-initiated" SAML2 flow
Is it possible integrate all code of SAML2 Spring source in my struts2 project?
Thank a lots :-)
I would like to use the SAML2 protocol between in my Struts2 web application without using external war spring-security-saml2, the code of this war managed entirely in the Struts2 project

How to create custom login module in spring boot web app using spring security

I’m trying to build a spring boot web app where I have my own login module with rest api backends that would do credential validation for me. I need to use spring security to have TLS implemented but even though I managed to override the login page the css would not work. And secondly,when I give the loginprocessingurl in the securityConfig as my controller route to what manages the credential validation, it says too many redirects.
Can I bypass the login module entirely ?
I don’t want to encrypt the password at client end and would really like to utilise spring security.
Thanks in advance!

Enable SSO on my web application using Azure

I have a web based Java application made using Spring Framework. I have a spring security file that authenticates users. I need to enable SSO on my application using Azure Active Directory so that I can integrate it with myapps.microsoft.com. Can someone provide me any pointers or direction.
Thanks.

SSO with with protocol? SAML or OAUTH?
In any case you have to register your app in the Active Directory as SSO Application. In this configuration you also define the OAUTH or SAML Options.
https://learn.microsoft.com/en-us/azure/active-directory/active-directory-saas-custom-apps

Java Security Apache Shiro vs Picketlink

I've got an Java EE application running with Apache Shiro to secure and authenticate to the website.
However I want to implement Single Sign on with Picketlink.
Is it possible to implement it "on top" or do I have to disable Shiro and do the whole authentication with Picketlink?
On the web I couldn't find any reference.

Tomcat Container Managed SSO Valve and Spring Security

We have over a dozen legacy web applications (each with their own app contexts) that use Tomcat's container managed security for simple form-based authentication. We currently use Tomcat's single sign on valve to allow authenticated users to jump between web apps without the need of re-authenticating. We are also developing new web applications using the Spring Security framework.
Is it possible to get users who are authenticated via the new Spring Security apps to also be able to jump to the older legacy (non-Spring) apps without the need of re-authenticating? Is their a way to bridge Spring Security with the Tomcat SSO valve?
I prefer to avoid making any changes to the legacy web apps, but understand if it doesn't seem possible.

You will be able to do it using J2eePreAuthenticatedProcessingFilter:
http://static.springsource.org/spring-security/site/docs/3.2.x/reference/htmlsingle/#d4e2766
Please note:
When Tomcat SSO is configured it provides Java EE authentication for a web application.
It means that for an application is transparent if it was authenticated by form authentication or for Tomcat SSO. Finally it is Java EE authentication.
So, you need to use J2eePreAuthenticatedProcessingFilter to be able to use Java EE authentication provided by Tomcat.