|
Replies:
4
-
Last Post:
Feb 4, 2009 10:07 PM
by: jdg6688
|
|
|
|
|
|
|
Problems with SAML 2.0 and the STSAttributeProvider values
Posted:
Jan 22, 2009 6:59 AM
|
|
|
I have a skeleton implementation of STS, WebService and a simple client.
This works so far, but I have to use issue a SAML 2.0 Token in the STS. If I change the TokenType from
<sp:RequestSecurityTokenTemplate>
<wst:KeySize>128</wst:KeySize>
<wst:KeyType>http://docs.oasis-open.org/ws-sx/ws-trust/200512/SymmetricKey</wst:KeyType>
<wst:TokenType>http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV1.1</wst:TokenType>
</sp:RequestSecurityTokenTemplate>
to
<sp:RequestSecurityTokenTemplate>
<wst:KeySize>128</wst:KeySize>
<wst:KeyType>http://docs.oasis-open.org/ws-sx/ws-trust/200512/SymmetricKey</wst:KeyType>
<wst:TokenType>urn:oasis:names:tc:SAML:2.0:assertion</wst:TokenType>
</sp:RequestSecurityTokenTemplate>
I receive a SAML 2.0 assertion, but it contains not the expected attributes like "role", "friendlyName" and so on. With the SAML 2.0 version the implention of the 'STSAttributeProvider' doesn't put the attributes into the token.
STSAttributeProvider Source code:
Map<QName, List<String>> attributes = new HashMap<QName, List<String>>();
attributes.put(new QName("http://bos.de", "role"), Arrays.asList("customer"));
attributes.put(new QName("http://sun.com", STSAttributeProvider.NAME_IDENTIFIER), Arrays.asList(userId));
attributes.put(new QName("http://schemas.xmlsoap.org/ws/2005/05/identity/claims", "givenname"),
Arrays.asList("meisengeiger"));
attributes.put(new QName("http://bos.de", "customer"), Arrays.asList("justiz"));
attributes.put(new QName("http://bos.de", "friendlyName"), Arrays.asList(name));
return attributes;
What's wrong?
|
|
|
|
|
|
|
Re: Problems with SAML 2.0 and the STSAttributeProvider values
Posted:
Jan 22, 2009 8:17 AM
in response to: lindemannralf
|
 |
Helpful |
|
|
This is a known issue.
We will fix it as soon as possible.
Thanks!
Jiandong
|
|
|
|
|
|
|
|
|
Re: Problems with SAML 2.0 and the STSAttributeProvider values
Posted:
Jan 22, 2009 8:33 AM
in response to: jdg6688
|
|
|
Thank you very much!
|
|
|
|
|
java.net RSS
