Re: [OT] Issues with XMLDSIG

2023-03-13 Thread Zdeněk Henek
Maybe this could help identify possible problems with Service Provider? http://saml.oktadev.com/ Most frequent issue I see in SAML integrations is missing valid certificate while decoding (metadata) signature. I guess this is not your problem so take it just as note. ;) ZH On Mon, Mar 13, 2023 a

OT: Disabling Stack Traces

2023-03-13 Thread jonmcalexander
Hello everyone, I know that we can put the following in the section in the server.xml, but is there a way that we can force this setting in the catalina.properties, or some other way? Thanks, Dream * Excel * Explore * Inspire Jon McAlexander Senior Infrastructure Engineer Asst. Vice Preside

Tomcat 9.0.72 and New Relic APM java agent issues

2023-03-13 Thread Roe, Jennifer L
We are using 9.0.73 Tomcat version and New Relic APM java agent 7.11.0, it seems we are missing the injected New Relic script and the DOM looks much different than in 9.0.71. Looks as though it's incorrectly escaping certain html tags as if they're text (EG: changing < to "/>") In our applicati

Re: [OT] Issues with XMLDSIG

2023-03-13 Thread Christopher Schultz
Zdeněk, On 3/13/23 12:57, Zdeněk Henek wrote: I have implemented SAML 2.0 Service Provider using https://github.com/spring-attic/spring-security-saml It is not developed anymore, but ... I don't have my dev env available till Sunday, if you would like I could use your Okta configuration next w

Re: [OT] Issues with XMLDSIG

2023-03-13 Thread Zdeněk Henek
Hi Chris, I have implemented SAML 2.0 Service Provider using https://github.com/spring-attic/spring-security-saml It is not developed anymore, but ... I don't have my dev env available till Sunday, if you would like I could use your Okta configuration next week to connect to my service provider

[OT] Issues with XMLDSIG

2023-03-13 Thread Christopher Schultz
All, I'm having a bit of trouble validating a SAML response which has been signed by Okta (who know a thing or two about signed XML), and the code I'm using was written by me using the basic Java XML security APIs, so I'm thinking there is something off with what I'm doing. If anyone has som