Stateless Sessions with Spring Security Saml and SP Application
<p>I tried to run the boot sample spring security saml boot from,
<a href="https://github.com/vdenotaris/spring-boot-security-saml-sample" rel="nofollow">https://github.com/vdenotaris/spring-boot-security-saml-sample</a></p>

<p>I am able to run it and integrate with identity provider.</p>

<p>But, I see that a session is created every time and remains persistent till the user sign's out.</p>

<p>I am using Resource based services with spring boot and so do not want the overhead of sessions.</p>

<p>I tried adding the below line to the configure method,
 http.sessionManagement()
        .sessionCreationPolicy(SessionCreationPolicy.STATELESS);</p>

<p>But, with this setting I am always being asked to login to Identity Provider.</p>

<p>If I login, it comes back to the page asking me to login again in a loop.</p>

<p>I am not sure if this is the correct behaviour when disabling sessions.</p>

<p>Can anyone provide me with the right approach to use stateless sessions with spring security saml extension and a service provider application.</p>

<p>Thanks,</p>

<p>Sri</p>