Skip to Content.
Sympa Menu

mace-opensaml-users - Re: Re: [OpenSAML] signed SAMLRequest in SOAPMessage

Subject: OpenSAML user discussion

List archive

Re: Re: [OpenSAML] signed SAMLRequest in SOAPMessage


Chronological Thread 
  • From:
  • To:
  • Subject: Re: Re: [OpenSAML] signed SAMLRequest in SOAPMessage
  • Date: Tue, 28 Apr 2009 10:08:46 -0400 (EDT)

I think found a workaround using a RPC SOAPHandler.
The samlRequest is sent 'unsigned' to the clientapplication building the
soapmessage.
A soaphandler intervenes when the soap is allready generated.
It takes out the samlRequest in the soapbody, signs it with opensaml api,
puts it back and gives control back to the client that sends the soap to the
webservice.
That way, the xml in the soapbody is the same (including namespaces) as the
xml at the time the signature is set.

It seems to work just fine.

Frederik



Archive powered by MHonArc 2.6.16.

Top of Page