Can I use SAML with a different authentication provider in the same web application

I have a Spring application already using Spring Security with local user repository. I also want to allow IDP login through SAML approval, but only for people who already have an account in my application.

1) Can I configure Spring protection to optionally use the SAML authentication provider or the LDAP authentication provider? 2) When someone authenticates through SAML, can I populate their session principle with information from the local user store? 3) Finally, can I do this through the Spring configuration, or do I need to do this programmatically?

+4
source share
1 answer
  • Yes, you can freely combine different authentication methods with SAML in one application.
  • Yes
  • You will need to write your own implementation of the interface SAMLUserDetailsService, which will make the population
+2
source

All Articles