我在使用 Saml 插件(https://www.lightsaml.com/SP-Bundle/Getting-started/)在 Symfony 2.8 中设置身份验证时遇到了问题。问题:我希望能够通过 SAML 登录并进入管理页面。/admin/login 页面工作正常,我看到用户已从数据库进行身份验证。但是,当我尝试通过 Saml 流程时,我总是会进入 /discovery 页面。当我看到日志时,我确实用户已通过身份验证。所以,我认为我在安全设置中有一些不正确的地方。请让我知道您是否可以提供帮助
以下是来自的设置
配置/security.yml 文件:
防火墙:开发:模式:^/(_(profiler|wdt)|css|images|js)/ 安全性:false
login_firewall:
pattern: ^/saml/login$
anonymous: ~
discovery_firewall:
pattern: ^/saml/discovery$
anonymous: ~
secured_area:
pattern: ^/
anonymous: ~
light_saml_sp:
provider: db_provider # user provider name configured in step 9
#user_creator: user_creator # name of the user creator service created in step 10
login_path: /saml/login
check_path: /saml/login_check
default_target_path: /profile
form_login:
login_path: /admin/login
check_path: /admin/login_check
default_target_path: /
remember_me: true
logout:
path: /logout
target: /
# activate different ways to authenticate
# http_basic: ~
# http://symfony.com/doc/current/book/security.html#a-configuring-how-your-users-will-authenticate
# form_login: ~
# http://symfony.com/doc/current/cookbook/security/form_login_setup.html
access_control:
- { path: ^/, roles: IS_AUTHENTICATED_ANONYMOUSLY }
- { path: ^/login$, roles: IS_AUTHENTICATED_ANONYMOUSLY }
- { path: ^/admin/login$, roles: IS_AUTHENTICATED_ANONYMOUSLY }
- { path: ^/profile, roles: ROLE_USER }