OpenSAML user discussion

[Dieter Houthooft <>]

I created an issue for this, but is was rejected:

https://bugs.internet2.edu/jira/browse/JOST-47

What we did is wrap the servlet request in a custom servlet request subclass. This subclass is identical to the original servlet request, except it allows for a configurable host name. An ugly hack for something that will occur in a lot of production environments (Load balancers, SSL offloaders, application firewalls).

best regards,

Dieter Houthooft.

On 27 Sep 2008, at 11:57, Bailo, John wrote:

I have a working servlet that decodes and validates a SAML object.

I want to have failover with two servers.

However, the URI in the SAML object has to match the target.   And, the SAML cannot be changed or the signature is invalidated.


Any thoughts about how a SAML object can be "reposted" to a failover server?

My platform is JBoss on w2003.

CONFIDENTIALITY NOTICE: The information in this Internet email is confidential and may be legally privileged. It is intended solely for the addressee. Access to this email by anyone else is unauthorized.