spring-boot-okta-saml

1. Create a new developer account https://developer.okta.com

2. Sign up. You’ll receive an email to activate your account and change your temporary password.

3. Make sure you take write down your Okta URL after you’ve signed up. And sing in with user/password

4. After login you will get okta home page

5. Create New App

6. Click on Create App Integration

7. Select SAML 2.0

8. Provide application name

9. Enter the following SAML Settings:

  Single Sign-On URL: https://localhost:8080/saml/SSO
  Use this for Recipient URL and Destination URL: YES
  Audience URI: https://localhost:8080/saml/metadata

10. Click Next

      Select the following two options:
        •	I’m an Okta customer adding an internal app
        •	This is an internal app that we have created

11. Click the Finish button to continue.

And copy the Identity Provider metadata link. It will be use in spring boot application configuration.

the Identity Provider metadata link: https://dev-82083850.okta.com/app/exk1cnq4xcw6JcqQo5d7/sso/saml/metadata

12. The final setup step you’ll need is to assign people to the application. Before that you have to add people

From left side select Directory -> People -> Add Person

13. Assign to user

14. Click on Assign link

15. Click on the Assignments tab in your application and the Assign > Assign to People button. You’ll see a list of people with your account in it.

16. Now create a spring boot application. add spring-security-saml-dsl dependency in pom.

  <dependency>
    <groupId>org.springframework.security.extensions</groupId>
    <artifactId>spring-security-saml-dsl</artifactId>
    <version>1.0.0.M3</version>
  </dependency>

17. Add below property in application yml

  server.port = 8080
  server.ssl.enabled = true
  server.ssl.key-alias = spring
  server.ssl.key-store = classpath:saml/keystore.jks
  server.ssl.key-store-password = secret
  security.saml2.metadata-url = <your metadata url>
  
 - here metadata url: https://dev-82083850.okta.com/app/exk1cnq4xcw6JcqQo5d7/sso/saml/metadata

18. Create jks file through keytool in command prompt.

  keytool -genkey-v-keystore keystore.jks -alias spring -keyalg RSA -keysize 2048 -validity 10000

  Add password secret when prompted for a keystore password and Save this jks file into project /resources/saml/ directory

19. Start your application then enter https://localhost:8080/v1/students url in browser. It will redirect to Okta login page. Enter your okta credential and you should get success response data