diff --git a/rules/rules-overridden-azure/technology-usage/security.windup.xml b/rules/rules-overridden-azure/technology-usage/security.windup.xml index 7ba35ec9..64f54608 100644 --- a/rules/rules-overridden-azure/technology-usage/security.windup.xml +++ b/rules/rules-overridden-azure/technology-usage/security.windup.xml @@ -57,5 +57,83 @@ OpenSAML + + + + + + + + + + + + + + + + + + + The application embeds a Spring Security library. Ensure that the application is configured to access the identity provider. + + Consider using Azure Active Directory as an identity provider. + + + + + + + Spring Security + + + + + + + + + + The application embeds an OAuth 2.0 library. For Spring Boot applications, please ensure that the application is configured to use Spring Security OAuth2. + + The Microsoft identity platform uses OAuth 2.0 and other protocols to enable applications to provide a Single Sign-On experience. + + By migrating your SSO implementation to Azure AD with OAuth 2.0, you leverage the capabilities of Azure AD for managing identities and enabling secure SSO across your applications. + Azure AD offers features like multi-factor authentication, conditional access policies, and seamless integration with various SaaS applications, providing a robust and scalable solution for identity and access management in the cloud. + + + + + + + + + OAuth 2.0 + + + + + + + + + + + + + The application embeds an OpenID library. The Microsoft identity platform uses OpenID and other protocols to enable applications to provide a Single Sign-On experience. + + By migrating your SSO implementation to Azure AD with OpenID, you leverage the capabilities of Azure AD for managing identities and enabling secure SSO across your applications. + Azure AD offers features like multi-factor authentication, conditional access policies, and seamless integration with various SaaS applications, providing a robust and scalable solution for identity and access management in the cloud. + + + + + + + + OpenID + + diff --git a/rules/rules-overridden-azure/technology-usage/tests/security-target-azure-appservice.windup.test.xml b/rules/rules-overridden-azure/technology-usage/tests/security-target-azure-appservice.windup.test.xml index d9f27e48..a6f62ae5 100644 --- a/rules/rules-overridden-azure/technology-usage/tests/security-target-azure-appservice.windup.test.xml +++ b/rules/rules-overridden-azure/technology-usage/tests/security-target-azure-appservice.windup.test.xml @@ -34,6 +34,36 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/rules/rules-overridden-azure/technology-usage/tests/security-target-discovery.windup.test.xml b/rules/rules-overridden-azure/technology-usage/tests/security-target-discovery.windup.test.xml index 8f828cbf..46746e6c 100644 --- a/rules/rules-overridden-azure/technology-usage/tests/security-target-discovery.windup.test.xml +++ b/rules/rules-overridden-azure/technology-usage/tests/security-target-discovery.windup.test.xml @@ -32,6 +32,17 @@ + + + + + + + + + + + diff --git a/rules/rules-reviewed/azure/springboot/spring-boot-to-azure-identity-provider.windup.xml b/rules/rules-reviewed/azure/springboot/spring-boot-to-azure-identity-provider.windup.xml deleted file mode 100644 index a25da902..00000000 --- a/rules/rules-reviewed/azure/springboot/spring-boot-to-azure-identity-provider.windup.xml +++ /dev/null @@ -1,47 +0,0 @@ - - - - - Identify any identity provider(s) used by the application. - - - - - - - - - - security - - - - - - - - - - - - - - - - - The application uses Spring security. - - Checkout Azure Active Directory as an identity provider. - - - - - - - - - - diff --git a/rules/rules-reviewed/azure/springboot/tests/data/spring-boot-to-azure-identity-provider/pom.xml b/rules/rules-reviewed/azure/springboot/tests/data/spring-boot-to-azure-identity-provider/pom.xml deleted file mode 100644 index 4fd516f2..00000000 --- a/rules/rules-reviewed/azure/springboot/tests/data/spring-boot-to-azure-identity-provider/pom.xml +++ /dev/null @@ -1,27 +0,0 @@ - - - 4.0.0 - - org.jboss.windup.rules.test - spring-boot-to-azure-identity-provider - 4.2.1_SNAPSHOT - Determine whether application relies on an identity provider(s). - - - - org.springframework.boot - spring-boot-starter-security - 5.0.10.Final - - - not-tested - spring-boot-starter-security - 5.0.10.Final - - - org.springframework.security - tested - 5.0.10.Final - - - diff --git a/rules/rules-reviewed/azure/springboot/tests/spring-boot-to-azure-identity-provider.windup.test.xml b/rules/rules-reviewed/azure/springboot/tests/spring-boot-to-azure-identity-provider.windup.test.xml deleted file mode 100644 index 9bbe68d8..00000000 --- a/rules/rules-reviewed/azure/springboot/tests/spring-boot-to-azure-identity-provider.windup.test.xml +++ /dev/null @@ -1,24 +0,0 @@ - - - data/spring-boot-to-azure-identity-provider - ../spring-boot-to-azure-identity-provider.windup.xml - - - - - - - - - - - - - - - - - diff --git a/rules/rules-reviewed/technology-usage/tests/data/security/openid4java.jar b/rules/rules-reviewed/technology-usage/tests/data/security/openid4java.jar new file mode 100644 index 00000000..e2e493d3 Binary files /dev/null and b/rules/rules-reviewed/technology-usage/tests/data/security/openid4java.jar differ diff --git a/rules/rules-reviewed/technology-usage/tests/data/security/spring-security-oauth2-2.4.2.RELEASE.jar b/rules/rules-reviewed/technology-usage/tests/data/security/spring-security-oauth2-2.4.2.RELEASE.jar new file mode 100644 index 00000000..e2e493d3 Binary files /dev/null and b/rules/rules-reviewed/technology-usage/tests/data/security/spring-security-oauth2-2.4.2.RELEASE.jar differ