Skip to Content.
Sympa Menu

mace-opensaml-users - Re: putting a handle in opensaml 1.0 assertion xml...

Subject: OpenSAML user discussion

List archive

Re: putting a handle in opensaml 1.0 assertion xml...


Chronological Thread 
  • From: "Tom Scavo" <>
  • To:
  • Subject: Re: putting a handle in opensaml 1.0 assertion xml...
  • Date: Mon, 2 Jul 2007 09:22:45 -0400
  • Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=La2O3NhKVXuiOufWwlwzg2I9RMR7A6TCvCYW14TFTEqfn2xtrT8jaylfJgrBeEs+t2bpqJzm4U+DHW55W97jYCJWgbPz5F1QS0bLUfYWUFdn+8iVv1wRdtTTbydoostA3AHJCPSloW1eYj3Cywxffjjt6K8cnoB6wUiIi77AHuM=

Gitesh, have you considered embedding your proprietary content in the
saml:Advice element? It will accommodate just about anything, I
believe.

Hope this helps,
Tom

On 7/2/07, Gitesh Malik
<>
wrote:

I am working with openSAML 1.0. We have a requirement of carrying around a
'reference handle' in the assertion. From what I have heard from other
developers it is not possible to insert extra nodes within the assertion xml
as this leads to the assertion xml not being validated by opensaml (as I
hear, its possible with the next version of opensaml). Therefore I am
planning to inject the handle as a Comment node in the xml. Therefore
assertion is created in the way –

SAMLAssertion assn = new
SAMLAssertion((Element)assertionNode); //assertionNode has
a comment set in. it may be arbitrarily big

However when assertion.toString() is called to retrieve the assertion – the
underlying comment is no longer available in the returned xml string. So it
seems that I would have to carry the assertion externally for the purpose
and not rely on assertion.toString() to retrieve the 'reference handle'.
Javadocs and documentation on the web do not indicate any way to change the
toString() behaviors through some passed in config param either.

I can take care of the issue by marinating external assertion. However this
is definitely not the cleanest way. Wonder if any one else has ever come
across this issue and handled it in more graceful way.

Thanks,

-gitesh



Archive powered by MHonArc 2.6.16.

Top of Page