How to add SAML extension to Keycloak AuthnRequest #15542

ch-lepp · 2022-11-17T09:29:18Z

ch-lepp
Nov 17, 2022

I'd like to send a few additional information to my SAML IDP in form of SAML extensions.

The Keycloak v19.0.3 that I currently use does not seem to support this functionality out of the box.
So following this advice I tried to create my own idp spi.

I created the following two classes:

public class MyOwnSAMLIdentityProvider extends SAMLIdentityProvider {

	public MyOwnSAMLIdentityProvider(KeycloakSession session, SAMLIdentityProviderConfig config, DestinationValidator destinationValidator) {
		super(session, config, destinationValidator);
	}
}

public class MyOwnSAMLIdentityProviderFactory extends SAMLIdentityProviderFactory {

	public static final String PROVIDER_ID = "my-own-saml";

	private DestinationValidator destinationValidator;

	@Override
	public String getName() {
		return "my own SAML";
	}

	@Override
	public MyOwnSAMLIdentityProvider create(KeycloakSession session, IdentityProviderModel model) {
		return new MyOwnSAMLIdentityProvider(session, new SAMLIdentityProviderConfig(model), destinationValidator);
	}

	@Override
	public String getId() {
		return PROVIDER_ID;
	}

	@Override
	public void init(Scope config) {
		super.init(config);
		this.destinationValidator = DestinationValidator.forProtocolMap(config.getArray("knownProtocols"));
	}

}

When trying to deploy this during server start, I get the following exception:

08:37:39,984 FATAL [org.keycloak.services] (ServerService Thread Pool -- 62) Error during startup: java.lang.NoClassDefFoundError: org/keycloak/saml/validators/DestinationValidator
        at deployment.ceres-keycloak-spi-collection.jar//de.data_experts.ceres.ceres_keycloak_spi_collection.identity_provider.MyOwnSAMLIdentityProviderFactory.init(MyOwnSAMLIdentityProviderFactory.java:46)
        at org.keycloak.keycloak-services@19.0.1//org.keycloak.services.DefaultKeycloakSessionFactory.loadFactories(DefaultKeycloakSessionFactory.java:297)
        at org.keycloak.keycloak-services@19.0.1//org.keycloak.services.DefaultKeycloakSessionFactory.init(DefaultKeycloakSessionFactory.java:110)

Does anyone have eny experience with that?

ch-lepp · 2022-11-17T12:49:21Z

ch-lepp
Nov 17, 2022
Author

Ah, I solved my exception by addin 8000 g the new saml-core dependency to the jboss-deployment-structure.xml

0 replies

Navigation Menu

Repository navigation

How to add SAML extension to Keycloak AuthnRequest #15542

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Replies: 1 comment

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

How to add SAML extension to Keycloak AuthnRequest #15542

Uh oh!

Uh oh!

ch-lepp Nov 17, 2022

Replies: 1 comment

Uh oh!

ch-lepp Nov 17, 2022 Author

ch-lepp
Nov 17, 2022

ch-lepp
Nov 17, 2022
Author