mace-opensaml-users - SAMLNameIdentifier format handlers

Subject: OpenSAML user discussion

List archive

From: Tom Scavo <>
To: OpenSAML <>
Subject: SAMLNameIdentifier format handlers
Date: Tue, 17 Jan 2006 14:36:30 -0500
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=G916RacX1paVc2kL6pOGtWJOaU/3LQzT/bhavvjE44gS0L38tVMUdQ/WqRWKQofpbfVOF2xIVwl+AWqvPUaImeHLzcnm2KgBASmRYkeecDNyvaRsCd5MS8HbQGqHAaJ7zJIGeHqrDJvqjdizJ3BpucfqnRR3yLrrQJnFdu5rMWY=

I couldn't find an example of a registered handler in the OpenSAML 1.1
Java library, so I'm providing a link to three such handlers, mostly
as examples of how it might be done:

http://viewcvs.globus.org/viewcvs.cgi/playground/java/gridshib/idp/src/org/opensaml/nameid/
http://viewcvs.globus.org/viewcvs.cgi/playground/java/gridshib/idp/tests/org/opensaml/nameid/
http://viewcvs.globus.org/viewcvs.cgi/playground/java/gridshib/idp/data/org/opensaml/nameid/

These handlers are for unspecified, emailAddress, and X509SubjectName
formatted NameIdentifiers. (If somebody knows how to handle the
WindowsDomainQualifiedName format, please let me know.) All
implementations that utilize these NameIdentifier formats can make use
of the handlers, which conform to SAML 1.1 Core.

Tom