okta Integration using SAML 2.0 into php website.

[Kamal Kaur]

Hello Team,

I am trying to integrate the SAML2.0 in my website. Configuration into okta using saml 2.0, and got the xml file from signon tab, and read the "SimpleSAMLphp Service Provider" for implementation into website and follow all the steps of this url :

a) https://simplesamlphp.org/docs/stable/simplesamlphp-sp*section_4

 but i am getting this error in "http://localhost/testokta/authsources.php".

 "Uncaught SimpleSAML\Error\CriticalConfigurationError: The configuration is invalid: Setting secure cookie on plain HTTP is not allowed. in".

Can I run this on localhost?

[Kamal Kaur]

ok, I wil read ur documentation can be implement on localhost?

--
This is a mailing list for users of SimpleSAMLphp, not a support service. If you are willing to buy commercial support, please take a look here:
 
https://simplesamlphp.org/support
 
Before sending your question, make sure it is related to SimpleSAMLphp, and not your web server's configuration or any other third-party software. This mailing list cannot help with software that uses SimpleSAMLphp, only regarding SimpleSAMLphp itself.
 
Make sure to read the documentation:
 
https://simplesamlphp.org/docs/stable/
 
If you have an issue with SimpleSAMLphp that you cannot resolve and reading the documentation doesn't help, you are more than welcome to ask here for help. Subscribe to the list and send an email with your question. However, you will be expected to comply with some minimum, common sense standards in your questions. Please read this carefully:
 
http://catb.org/~esr/faqs/smart-questions.html
---
You received this message because you are subscribed to a topic in the Google Groups "SimpleSAMLphp" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/simplesamlphp/aPcmvIqK23A/unsubscribe.
To unsubscribe from this group and all its topics, send an email to simplesamlph...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/simplesamlphp/f00a48b4-c3d8-48b9-adc8-d81e93477b49n%40googlegroups.com.

[pat...@cirrusidentity.com]

You can run SSP on localhost. The error "Setting secure cookie on plain HTTP is not allowed" indicates you are not running on https but have SSP configured to set the secure flag on cookies (look in config.php).

I think you'll run into other problems trying to run without https since SAML relies on cross-site posting of SAML assertions and browsers have become increasingly stringent in their requirements to allow cookies to be sent with these cross-site POSTs.  This means that the browser may not always send or store your cookies if not running on https.

I would recommend you do your testing with https://localhost

- Patrick

[Kamal Kaur]

Hi

 I do implement  this 'session.cookie.secure' => false, in config.php file.

 I got this error:

Please collaborate me.

Thanks

To view this discussion on the web visit https://groups.google.com/d/msgid/simplesamlphp/4f93b109-dc5f-42cc-8291-16a2987fa5d8n%40googlegroups.com.

[Peter Schober]

* Kamal Kaur <kamal....@gmail.com> [2021-05-28 08:25]:
> I got this error:

Can you access SimpleSAMLphp's base URL,
http://localhost/simplesaml/ in your case?

-peter