Skip to Content.
Sympa Menu

mace-opensaml-users - Re: [OpenSAML] OpenSAML 1 to 2 transition

Subject: OpenSAML user discussion

List archive

Re: [OpenSAML] OpenSAML 1 to 2 transition


Chronological Thread 
  • From: Chad La Joie <>
  • To:
  • Subject: Re: [OpenSAML] OpenSAML 1 to 2 transition
  • Date: Tue, 07 Jul 2009 17:38:05 +0200
  • Organization: SWITCH

The binding classes are the classes that implement the bindings. I
don't know what other information to give you. If those don't hook in
to whatever framework you're going to use to attempt to write an IdP
then you'll need to write your own binding code.

Is there a reason you think you can't write a login handler for Shib? The process to do that is far simpler than the process of handling SAML 2 authentication.

Alexander Müller wrote:
Hi,

quite a few time ago I implemented a SAML 1.1 IdP which was fairly
easy - to be honest however with a good share of help from Scott -,
generating the artifact with SAMLArtifactType0001 and remembering it
along with the data, then receiving the SAML request from the SP,
generating the response from the stored data and sending it off.

I am having now a similar project and considered this time
Shibboleth, however the authentication is a little bit more
complicated this time and so it appears I would need to write a
custom extension integrating the authentication into the SAML process
flow, which doesnt seem to be the easiest part.

Because of that I am currently considering using again OpenSAML
directly. The artifact generation itself still seems rather easy
using SAML2ArtifactType0004, however I am running into some
understanding problems upon receiving and processing the SAML request
from the Service Provider. Basically I am missing the binding
classes, I noticed the org.opensaml.*.binding.* packages, but havent
found any classes/methods which would allow me to extract the SAML
request from the HTTP request respectively to send off the actual
SAML response/assertion - as I could with
SAMLBindingFactory.getInstance(SAMLBinding.SOAP).

I admit I might be lacking some basic understanding of the changes in
OpenSAML 2, or SAML 2 in general, but I am currently truly lost and
hope someone could just point me into the right direction, with some
pseudo code or general hint, given it hasnt got too complex with
OpenSAML 2.

Thanks, Alexander


--
SWITCH
Serving Swiss Universities
--------------------------
Chad La Joie, Software Engineer, Net Services
Werdstrasse 2, P.O. Box, 8021 Zürich, Switzerland
phone +41 44 268 15 75, fax +41 44 268 15 68
,
http://www.switch.ch




Archive powered by MHonArc 2.6.16.

Top of Page