Re: [keycloak-user] [External] Re: Keycloak IDP Brokering + Spring Boot/Angular

Hello Rodriguez, Thanks a lot. I will try the links. Our application will act as SP and we will use client's Microsoft ADFS as IDP. Once the user browse the front-end (e.g.: http://localhost:5005 ), the SP will send the metadata to IDP etc.. The problem is how to initiate this. Thanks, Suleyman -----Original Message----- From: keycloak-user-bounces(a)lists.jboss.org [mailto:keycloak-user-bounces@lists.jboss.org] On Behalf Of Luis Rodríguez Fernández Sent: 13 April 2018 17:20 To: keycloak-user(a)lists.jboss.org Subject: [External] Re: [keycloak-user] Keycloak IDP Brokering + Spring Boot/Angular Hello Suleyman, The sample [1] application of the spring-security-saml [2] worked like a charm for me for the. I just needed to specify the metadata URL of my idp in org.opensaml.saml2.metadata.provider.HTTPMetadataProvider bean of sample/src/main/webapp/WEB-INF/securityContext.xml [3] In my setup I was using openAM as IdP In your case I iimagine that you have to register ADFS as IdP [4], get the SP metadata [5] and use it in your app? Or perhaps you have to register your app as a saml client [6] Hope it helps, [1] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_spring-2D... [2] https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_spring-2D... [3] https://urldefense.proofpoint.com/v2/url?u=https-3A__docs.spring.io_sprin... [4] https://urldefense.proofpoint.com/v2/url?u=https-3A__www.keycloak.org_doc... [5] https://urldefense.proofpoint.com/v2/url?u=https-3A__www.keycloak.org_doc... [6] https://urldefense.proofpoint.com/v2/url?u=https-3A__www.keycloak.org_doc... 2018-04-11 17:17 GMT+02:00 Yildirim, Suleyman < suleyman.yildirim(a)accenture.com&gt;: -- "Ever tried. Ever failed. No matter. Try Again. Fail again. Fail better." - Samuel Beckett _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.jboss.org_mail... ________________________________ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. Your privacy is important to us. Accenture uses your personal data only in compliance with data protection laws. For further information on how Accenture processes your personal data, please see our privacy statement at https://www.accenture.com/us-en/privacy-policy. ______________________________________________________________________________________ www.accenture.com