OpenSAML user discussion

["Scott Cantor" <>]

> If somebody please provide steps of implementing saml using opensaml for 
> existing application (may be web service) on some j2ee 
> container (or some authentication server),
> will be very useful for newbies of saml.

OpenSAML is just a low-level library. You have to start by fully
understanding what it is you're trying to do with SAML before you even get
near the coding stage.

> because saml specs are easily available but not these steps 
> of using saml to existing application for some container.

That's the point. You need a profile to implement first. SAML doesn't just
do stuff in a vaccuum.

The standard SAML profiles only cover a very small set of use cases, mostly
around web SSO. If you're looking at web service use cases, you usually need
something more than SAML alone.

Liberty has a a bunch of specs that support web service use cases, for
example, but SAML's only a small part of that.

-- Scott