SAML Support for existing Grails Application

[weinellucian]

Expected Behavior

We have Grails 6 applications which currently uses grails-spring-security-saml for SAML support,
Currently our applications have been to Grails 7, we don't have grails-spring-security-saml release supporting Grails 7, can you suggest us on how to have SAML support for Grails 7 migrated App.

Actual Behaviour

Grails 7 Application SAML support

Steps To Reproduce

No response

Environment Information

Windows 11
JDK 17.0.13

Example Application

No response

Version

7.0.1

[jamesfredley]

https://github.com/grails-spring-security-saml/grails-spring-security-saml
https://central.sonatype.com/artifact/io.github.grails-spring-security-saml/spring-security-saml/versions

io.github.grails-spring-security-saml

You will need to reach out to the plugin developer. There appears to be a recent commit for Grails 7.

And if all it requires is javax -> jakarta updates https://grails.apache.org/docs/latest/guide/upgrading.html#_12_2_javax_jakarta can work until the Grails 7 version is released

[weinellucian]

Do we have any other way to support SAML without grails-spring-security-saml plugin

[jamesfredley]

I am unsure since I do not use saml, but that appears to be the way most people have done it on Grails historically.

You can also build that plugin locally using the Grails 7 commit and include it directly in your application, if it is not published yet. And updating Plugins to Grails 7 is a pretty quick process. #15044

Separately from using a Grails plugin, you could just following https://docs.spring.io/spring-security/reference/6.5/servlet/saml2/login/overview.html to incorporate the necessary functionality directly into your application. Grails 7 uses the Spring Security version provided by Spring Boot Dependencies, currently 6.5.7 https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-dependencies/3.5.10/dependencies

[valentingoebel]

The grails-spring-security-saml plugin was updated to Grails Version 7 and can be built locally using ./gradlew publishToMavenLocal or deployed to a private artifactory repository if you have that, but I have yet to deploy a Grails 7 app in production. I planned on doing so in early January but ran into an issue that took too long to figure out and I had to proceed with adding new features to the Grails 6 version in the interim.