From afe5c4eb8d3d909940426cf9d38fdf9cf39b2eea Mon Sep 17 00:00:00 2001 From: snowykte0426 Date: Thu, 1 May 2025 19:41:27 +0900 Subject: [PATCH 1/2] docs(saml2): add warning that HTTP-Redirect binding is not supported for responses Spring Security does not support HTTP-Redirect binding for SAML 2.0 responses. This adds a warning block to the documentation to inform users of this limitation. Fixes: gh-11161 --- docs/modules/ROOT/pages/migration-7/index.adoc | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/docs/modules/ROOT/pages/migration-7/index.adoc b/docs/modules/ROOT/pages/migration-7/index.adoc index 9cdb6dfda5e..aa26cd6cb5a 100644 --- a/docs/modules/ROOT/pages/migration-7/index.adoc +++ b/docs/modules/ROOT/pages/migration-7/index.adoc @@ -7,3 +7,9 @@ While Spring Security 7.0 does not have a release date yet, it is important to s This preparation guide is designed to summarize the biggest changes in Spring Security 7.0 and provide steps to prepare for them. It is important to keep your application up to date with the latest Spring Security 6 and Spring Boot 3 releases. + +[WARNING] +==== +Spring Security does not support HTTP-Redirect binding for SAML Responses. +If attempted, it will result in an invalid request handling. +==== From a4320bd6b7a2f542a88b9af25370d2701c889311 Mon Sep 17 00:00:00 2001 From: snowykte0426 Date: Thu, 1 May 2025 19:41:27 +0900 Subject: [PATCH 2/2] docs(saml2): clarify that HTTP-Redirect binding is not supported for SAML 2.0 responses Spring Security does not support using HTTP-Redirect binding for SAML 2.0 responses, as this is not permitted by the SAML specification. This change adds a warning block to the migration guide to clearly document this limitation and help users avoid confusion when configuring SAML identity providers. Fixes: gh-11161 --- docs/modules/ROOT/pages/migration-7/index.adoc | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/docs/modules/ROOT/pages/migration-7/index.adoc b/docs/modules/ROOT/pages/migration-7/index.adoc index 9cdb6dfda5e..aa26cd6cb5a 100644 --- a/docs/modules/ROOT/pages/migration-7/index.adoc +++ b/docs/modules/ROOT/pages/migration-7/index.adoc @@ -7,3 +7,9 @@ While Spring Security 7.0 does not have a release date yet, it is important to s This preparation guide is designed to summarize the biggest changes in Spring Security 7.0 and provide steps to prepare for them. It is important to keep your application up to date with the latest Spring Security 6 and Spring Boot 3 releases. + +[WARNING] +==== +Spring Security does not support HTTP-Redirect binding for SAML Responses. +If attempted, it will result in an invalid request handling. +====