小编Duf*_*r33的帖子

刚刚开始与SAML合作并遇到了各种各样的问题,其中大部分都是我解决的问题.但是,我仍然没有的是如何关闭发现,以便在访问任何受保护资源时,Spring自动重定向到IdP(我只有一个并且还将其设置为默认值).我在Springs文档中看到你可以很容易地关闭发现,但是文档似乎缺乏示例和/或细节,所以我不完全确定如何做到这一点.

到目前为止,我已经尝试将idpSelectionPath设置为空,以及使用includeDiscoveryExtension和idpDiscoveryEnabled设置为false.使用直接URL(context/saml/login？idp = IDP)确实有效,但不是一个选项,因为我要求任何受保护的URL在用户未登录时自动重定向到IdP.

以下是我的securityContext.xml文件的工作版本,因为我所做的一些更改(例如删除所有发现设置)导致浏览器出现无限循环错误.任何和所有的帮助表示赞赏.谢谢!

<?xml version="1.0" encoding="UTF-8" ?>
<beans xmlns="http://www.springframework.org/schema/beans"
   xmlns:security="http://www.springframework.org/schema/security"
   xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
   xmlns:context="http://www.springframework.org/schema/context"
   xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.1.xsd
          http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.1.xsd http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-3.1.xsd">

<!-- Enable auto-wiring -->
<context:annotation-config/>
<context:component-scan base-package="org.springframework.security.saml"/>

<!-- Unsecured pages -->
<security:http security="none" pattern="/saml/web/**"/>
<security:http security="none" pattern="/logout.jsp"/>
<security:http security="none" pattern="/favicon.ico"/>

<!-- Secured pages -->
<security:http entry-point-ref="samlEntryPoint">
    <security:intercept-url pattern="/**" access="IS_AUTHENTICATED_FULLY"/>
    <security:custom-filter before="FIRST" ref="metadataGeneratorFilter"/>
    <security:custom-filter after="BASIC_AUTH_FILTER" ref="samlFilter"/>
</security:http>

<bean id="samlFilter" class="org.springframework.security.web.FilterChainProxy">
    <security:filter-chain-map request-matcher="ant">
        <security:filter-chain pattern="/saml/login/**" filters="samlEntryPoint"/>
        <security:filter-chain pattern="/saml/logout/**" filters="samlLogoutFilter"/>
        <security:filter-chain pattern="/saml/metadata/**" filters="metadataDisplayFilter"/>
        <security:filter-chain pattern="/saml/SSO/**" filters="samlWebSSOProcessingFilter"/>
        <security:filter-chain pattern="/saml/SSOHoK/**" filters="samlWebSSOHoKProcessingFilter"/>
        <security:filter-chain pattern="/saml/SingleLogout/**" filters="samlLogoutProcessingFilter"/>
        <security:filter-chain …