User creation - SAML response stored in crx

[#1]

Hi,

We are trying to leverage SAML Authentication Handler for SSO in our application. In Adobe Granite SAML 2.0 Authentication Handler configuration Autocreate CRX Users is checked. After successful authentication, user gets created in crx along with that we can find a property samlResponse at user node which contains encrypted SAML response.

Is there anyway we can avoid storing SAML response in crx as we are not authorized to store user personal information like email, phone etc...?

[#2 · Accepted solution]

I believe this is working as designed. In case you would like to make it more secure, you can turn on the encryption and have the encrypted response saved in AEM so that it can only be decoded using the private key.

[#3]

Hi Jaideep,

Any references on custom AuthenticationInfoPostProcessor where i can get SAML response from request, read it to get details in AEM 6.4 instead of decrypting samlResponse property from user node after successful login?

Referred this blog http://apoorva-ganapathy.blogspot.com/2016/08/aem-processing-saml-response-using.html but both httpRequest.getPathInfo() and httpRequest.getParameter("saml_login") are null in custom AuthenticationInfoPostProcessor.

Thanks & Regards,

Srikanth Pogula.

https://forums.adobe.com/thread/2652904

[#4]

Thanks Jaideep.

[#5]

Hi JaideepBrar,

Synchronized Attributes field is left blank, after successful login user gets created in crx but i can still see the property samlResponse.

[#6]

You can use the "Synchronized Attributes" in the SAML handler to configure the attributes that should be synced/stored with AEM.