User creation - SAML response stored in crx

srikanthp689160

24-09-2019

Hi,

We are trying to leverage SAML Authentication Handler for SSO in our application. In Adobe Granite SAML 2.0 Authentication Handler configuration Autocreate CRX Users is checked. After successful authentication, user gets created in crx along with that we can find a property samlResponse at user node which contains encrypted SAML response.

Is there anyway we can avoid storing SAML response in crx as we are not authorized to store user personal information like email, phone etc...?

Accepted Solutions (1)

Accepted Solutions (1)

jbrar

Employee

24-09-2019

I believe this is working as designed. In case you would like to make it more secure, you can turn on the encryption and have the encrypted response saved in AEM so that it can only be decoded using the private key.

Answers (4)

Answers (4)

srikanthp689160

25-09-2019

Hi Jaideep,

Any references on custom AuthenticationInfoPostProcessor where i can get SAML response from request, read it to get details in AEM 6.4 instead of decrypting samlResponse property from user node after successful login?

Referred this blog http://apoorva-ganapathy.blogspot.com/2016/08/aem-processing-saml-response-using.html but both httpRequest.getPathInfo() and httpRequest.getParameter("saml_login") are null in custom AuthenticationInfoPostProcessor.

Thanks & Regards,

Srikanth Pogula.

https://forums.adobe.com/thread/2652904

srikanthp689160

24-09-2019

Hi JaideepBrar,

Synchronized Attributes field is left blank, after successful login user gets created in crx but i can still see the property samlResponse.

1837089_pastedImage_2.png

1837090_pastedImage_3.png

jbrar

Employee

24-09-2019

You can use the "Synchronized Attributes" in the SAML handler to configure the attributes that should be synced/stored with AEM.Screen Shot 2019-09-24 at 8.34.58 AM.png