Submit Feedback
Legacy Knowledge Base
Published Jul. 2, 2025

Signed SAML response

Written By

Kanchan Bisht

How To articles are not official guidelines or officially supported documentation. They are community-contributed content and may not always reflect the latest updates to Liferay DXP. We welcome your feedback to improve How To articles!

While we make every effort to ensure this Knowledge Base is accurate, it may not always reflect the most recent updates or official guidelines.We appreciate your understanding and encourage you to reach out with any feedback or concerns.

Legacy Article

You are viewing an article from our legacy "FastTrack" publication program, made available for informational purposes. Articles in this program were published without a requirement for independent editing or verification and are provided"as is" without guarantee.

Before using any information from this article, independently verify its suitability for your situation and project.

Issue

  • How can the signed response, which is required by ADFS to complete authentication at the Liferay end, be clarified?
Environment
  • Liferay DXP 7.0
  • Liferay DXP 7.1
  • Liferay DXP 7.2
  • Liferay DXP 7.3

Resolution

  • Requests from ADFS to Liferay must be signed.

  • Run the command below in the Power shell window, replace the 'ADFS' part to Relying part that has been created (using the following command, the response is now signed). 
    Set-AdfsRelyingPartyTrust -TargetName "ADFS" -SamlResponseSignature MessageAndAssertion
  • The following should appear in the output after running the command: 
    SamlResponseSignature : MessageAndAssertion
  • Create a user on Liferay (SP) with the same name that has been created in ADFS (IdP)
  • Access to https://liferay-server-url, the user will be redirected to ADFS and can log in with SSO. If the user wants to automatically sync up user data in Liferay with ADFS, use general Liferay’s LDAP integration.
  • To confirm if users are properly created, enable 'com.liferay.saml.resolver.DefaultUserResolver' log in Administrator console of Liferay.

Additional Information

  • Attribute mappings for IdP connections are as follows: 
    http\://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress=emailAddress
    http\://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname=firstName
    http\://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname=lastName
    http\://schemas.xmlsoap.org/claims/CommonName=screenName

  • Using MS ADFS & Liferay SAML Integration

Did this article resolve your issue ?
Legacy Knowledge Base
Did this article resolve your issue ?