# Securing SAML Apps

**URL:** <https://forum.keycloak.org/t/securing-saml-apps/14423>\
**Category:** Securing applications\
**Tags:** authentication, saml\
**Created:** [March 18, 2022, 4:42pm UTC](https://forum.keycloak.org/t/securing-saml-apps/14423 "2022-03-18T16:42:15Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![sriyanto](https://avatars.discourse-cdn.com/v4/letter/s/e274bd/32.png) [@sriyanto](https://forum.keycloak.org/u/sriyanto)\
**Post date:** [March 18, 2022, 4:42pm UTC](https://forum.keycloak.org/t/securing-saml-apps/14423/1 "2022-03-18T16:42:16Z")

</div>

Hi There,

Currently I’m doing PoC using Keycloak as my IdP and snipeIT as my SP with SAML authentication.  
I had done testing snipeIT SAML with Google SAML it work fine, but when I tried use Keycloak as my IdP I’ve got error message “500 Server Error”.

1. As initial step I had import the metadata from my IdP (Keycloak) to my SP (SnipeIT)
2. Import the Metadata of my SP (SnipeIT) in Keycloak client

During I login to my SP using SAML method, it bring me to Keycloak login page which work fine.  
But after I authenticate it bring me to error page “500 Server Error”

Much appreciate if there anyone can advise me how to configure the SAML client properly and resolve this issue.

Thanks in advance

---

<div class="post-metadata">

**Author:** ![Srinivasan](https://avatars.discourse-cdn.com/v4/letter/s/90db22/32.png) [@Srinivasan](https://forum.keycloak.org/u/Srinivasan)\
**Post date:** [October 12, 2022, 12:26pm UTC](https://forum.keycloak.org/t/securing-saml-apps/14423/2 "2022-10-12T12:26:33Z")

</div>

I am also facing the same issue. Did you find any solution?

---

<div class="post-metadata">

**Author:** ![kvtobola](https://avatars.discourse-cdn.com/v4/letter/k/ce7236/32.png) [@kvtobola](https://forum.keycloak.org/u/kvtobola)\
**Post date:** [March 8, 2023, 6:00pm UTC](https://forum.keycloak.org/t/securing-saml-apps/14423/3 "2023-03-08T18:00:06Z")

</div>

I am facing the same issue too. Were either of you able to find a solution?

---

<div class="post-metadata">

**Author:** ![skwv](https://avatars.discourse-cdn.com/v4/letter/s/f19dbf/32.png) [@skwv](https://forum.keycloak.org/u/skwv)\
**Post date:** [May 31, 2023, 1:12pm UTC](https://forum.keycloak.org/t/securing-saml-apps/14423/4 "2023-05-31T13:12:35Z")

</div>

Hello,

I was able to get it working by disabling the option " Signing keys config" inside the “Keys” tab inside keycloak and setting “security.authnRequestsSigned=false” inside the snipeit application. The option “Sign documents” inside keycloak has to stay enabled. Then login works.  
This is surely not a wanted state but I did not got farther.

Edit: After you get it working and get an error 500 follow the instructions here: [Keycloak SAML: Found an Attribute element with duplicated Name · Issue #222 · nextcloud/user\_saml · GitHub](https://github.com/nextcloud/user_saml/issues/222#issuecomment-402542562)

Also the logout does not work on the first try, logout again and it works.