OpenSAML user discussion

[Mintoo C <>]

Hi Scott,

The issue raised here is a reality for a lot of big organizations
where changing the environment is a big risk and relatively slow
placed. Not to say that those are the very organisations that need
saml the most.
However, I believe opensaml (with small changes) is very much
compatible with jdk1.3.
I too had to go down this path and I have a saml 1.1 implementation
running on jdk1.3, xerces rebuild, jaxp 1.2 (for jdk 1.3),
jsse1.0.3_03 (for jdk1.3) and I think probably had to use dom2.
There are quite a few seeming roadblocks but nothing much to stop one
from using opensaml on jdk1.3.
I had failed to document all the steps taken in getting this going
but, I could put something down on the learnings.

-Mintoo

On 4/28/05, Scott Cantor 
<>
 wrote:
> >  our (large) company's IT management wanted to use OpenSAML,
> > however, for various reasons we're stuck with JDK 1.3* for a
> > good while longer.  Given that, the powers that be here were
> > curious if anyone had personal recommendations or experiences
> > about any alternatives, even commercial ones, to handle SAML
> > messaging in a Java environment.
> 
> Tom Scavo's been compiling some of this kind of thing, it might be a
> starting point:
> 
> https://mail.internet2.edu/wws/arc/shibboleth-dev/2005-04/msg00090.html
> 
> As for commercial stuff, most of the big security companies have something,
> I think.
> 
> That said, I believe that JAXP 1.3 does work on JDK 1.3.
> 
> https://jaxp.dev.java.net/
> 
> With that in mind, I'm willing to do a little bit of work to see if I can
> use reflection to check for and conditionally avoid the 1.4-specific methods
> I'm using if it's not too much work.
> 
> If your requirement, however, is to use some old XML parser, let me know, so
> I won't waste the time.
> 
> -- Scott
> 
>