Skip to Content.
Sympa Menu

mace-opensaml-users - Re: [OpenSAML] signed SAMLRequest in SOAPMessage

Subject: OpenSAML user discussion

List archive

Re: [OpenSAML] signed SAMLRequest in SOAPMessage


Chronological Thread 
  • From: Chad La Joie <>
  • To:
  • Subject: Re: [OpenSAML] signed SAMLRequest in SOAPMessage
  • Date: Tue, 28 Apr 2009 10:26:59 -0400
  • Openpgp:
  • Organization: SWITCH

Can you write this up with code examples? It's been asked a number of
times on the list and no one has ever shown real documentation on what
they have done such that other people can do it as well.


wrote:
> I think found a workaround using a RPC SOAPHandler.
> The samlRequest is sent 'unsigned' to the clientapplication building the
> soapmessage.
> A soaphandler intervenes when the soap is allready generated.
> It takes out the samlRequest in the soapbody, signs it with opensaml api,
> puts it back and gives control back to the client that sends the soap to
> the webservice.
> That way, the xml in the soapbody is the same (including namespaces) as the
> xml at the time the signature is set.
>
> It seems to work just fine.
>
> Frederik

--
SWITCH
Serving Swiss Universities
--------------------------
Chad La Joie, Software Engineer, Net Services
Werdstrasse 2, P.O. Box, 8021 Zürich, Switzerland
phone +41 44 268 15 75, fax +41 44 268 15 68
,
http://www.switch.ch




Archive powered by MHonArc 2.6.16.

Top of Page