SAML authentication with UAA, behind a reverse proxy about uaa HOT 6 CLOSED

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/184638265

The labels on this github issue will be updated when the story is started.

from uaa.

Ok, you mentioned you have a " fork, with some modifications, as part of web application"
So do you have adapted the Bean Definition according to
https://docs.spring.io/spring-security-saml/docs/current/reference/html/configuration-advanced.html
?
Because then I recommend to you, please open a PR and we check how we can use both variant with and without proxy

from uaa.

from uaa.

Hi,

I have setup uaa also in docker and nginx next to and simulated this. So UAA using SAML relys on uaa.url and entityBaseURL setting, e.g.
https://github.com/cloudfoundry/uaa/blob/develop/uaa/src/test/resources/integration_test_properties.yml#L59-L61

Set both to your external name auth.saml-example.net define proxy setting and finally ensure that you have enabled / activate the reservation of host header (ProxyPassReverse ), e.g. https://www.nginx.com/resources/wiki/start/topics/examples/likeapache/
Depending on your reverse proxy there should be a setting to do this and then you will get it working - at least in my case it worked then with SAML (azure) and UAA (docker) and NGINX (docker) .

from uaa.

thanks for taking time to look at this in more detail. I had also found it necessary to add proxy_set_header Host ;
I'll go back and retry this early next week.

from uaa.

close this now

from uaa.