OpenSAML user discussion

["Scott Cantor" <>]

> I have a feeling it's SAML 2.0 which is why I can't figure it out with the
> current library.  I saw the test script in your 2.0 lib.  Basically the
SAML
> provider is sending me an SAMLResponse parameter in an HTTP Form Post. As
a
> consumer application, I need to to consume the information HTTP request
and
> validate it and allow entry to our application.

Well, the word "validate" there encompasses a lot of stuff. There is no
single place where it happens. The parser (and the basic XML classes),
message decoder classes, security policy rules, trust engines, and the SSO
profile validator all work together to "implement" the process you're
describing.

You still haven't said which language this is either, so anything else I
could tell you is moot unless you're using C++.

-- Scott