OpenSAML user discussion

["Scott Cantor" <>]

> Your suggestion worked. OpenSAML seems to be able to deserialize the SAML
> response from the identifying party. Only - it is not able to find any
> subjects within the request. So my codeline "Subject subject =
>
((SubjectStatement)(assertion.getSubjectStatements().get(0))).getSubject();"
> is throwing exception.

If it's anything like my code, you'll have to access the
AuthenticationStatement collection.

> Is there any way I can serialize the Response object from opensaml just to
> get an xml dump and verify that everything is fine?

Marshalling gives you a DOM. Serialization is up to you, and there are
helper functions somewhere in there to do it.

> 1.    We have latest versions of xerces and xalan in our web-inf\lib
> folder. Why do I have to endorse them?

Please look at the list archives, this question has been addressed hundreds
of times. If there was any way to avoid endorsing them, we wouldn't do it.

> 2.    How do I ensure that I am conforming to SAML 1.1 and not 1.0? The
> opensaml classes I import right now are packaged as
org.opensaml.saml1.core.

They share a namespace and are structurally identical with differences I
doubt that I could explain unless you understand XML Schema. If the
MinorVersion is 1, it's SAML 1.1.

-- Scott