We are trying to use opensaml with spring security. We need open saml version 4.3.2 but we are not able to download using maven and its forcing us to add shibboleth repository in my POM file.

Is this legit and not have any security concerns?

Previous versions of opensaml was getting downloaded without shibboleth repository entry in my POM.

We are trying to use opensaml with spring security. We need open saml version 4.3.2 but we are not able to download using maven and its forcing us to add shibboleth repository in my POM file.

Is this legit and not have any security concerns?

Previous versions of opensaml was getting downloaded without shibboleth repository entry in my POM.

• spring-security
• maven-3
• shibboleth
• opensaml

Share Improve this question Follow edited Mar 7 at 18:25 James Z 12.3k1010 gold badges2727 silver badges4747 bronze badges asked Mar 7 at 15:36 SanjaySanjay 31533 silver badges1515 bronze badges

Add a comment  | 

1 Answer 1

Sorted by: Reset to default 0

The Shibboleth project's statement on Maven Central is here:

https://shibboleth.atlassian/wiki/spaces/DEV/pages/1123844333/Use+of+Maven+Central

Documentation on the Shibboleth project-provided repositories is here:

https://shibboleth.atlassian/wiki/spaces/DEV/pages/2891317253/MavenRepositories