Skip to Content.
Sympa Menu

perfsonar-dev - [AA] SAML Assertion example

Subject: perfsonar development work

List archive

[AA] SAML Assertion example


Chronological Thread 
  • From: Cándido Rodríguez Montes <>
  • To: Perfsonar Development List <>
  • Subject: [AA] SAML Assertion example
  • Date: Wed, 7 Feb 2007 16:46:05 +0100
Hi guys,
I attach in this email a SAML Assertion example that it has been created by an eduGAIN component.

Regards

<Assertion
   xmlns="urn:oasis:names:tc:SAML:1.0:assertion"
   AssertionID="_11c00e81bafd9b347539d28e74d170ce"
   IssueInstant="2006-12-22T12:25:38.956Z"
   Issuer="urn:mace:switch.ch:aaitest:edugain-login.switch.ch"
   MajorVersion="1"
   MinorVersion="1">
	<Conditions
	   NotBefore="2006-12-22T12:25:38.950Z"
	   NotOnOrAfter="2006-12-22T12:30:38.950Z">
		<AudienceRestrictionCondition>
			<Audience>
			  urn:mace:switch.ch:aaitest
			</Audience>
		</AudienceRestrictionCondition>
	</Conditions>
	<AttributeStatement>
		<Subject>
			<NameIdentifier
			   Format="urn:mace:shibboleth:1.0:nameIdentifier"
			   NameQualifier="urn:mace:switch.ch:aaitest:edugain-login.switch.ch">
			  8c9b3696f140614ce8ee5ce320c3521b803ff9c5
			</NameIdentifier>
			<SubjectConfirmation>
				<ConfirmationMethod>
				  urn:oasis:names:tc:SAML:1.0:cm:bearer
				</ConfirmationMethod>
			</SubjectConfirmation>
		</Subject>
		<Attribute
		   AttributeName="urn:mace:dir:attribute-def:preferredLanguage"
		   AttributeNamespace="urn:mace:shibboleth:1.0:attributeNamespace:uri">
			<AttributeValue>
			  es
			</AttributeValue>
		</Attribute>
	</AttributeStatement>
	<AttributeStatement>
		<Subject>
			<NameIdentifier
			   Format="urn:mace:shibboleth:1.0:nameIdentifier"
			   NameQualifier="urn:mace:switch.ch:aaitest:edugain-login.switch.ch">
			  8c9b3696f140614ce8ee5ce320c3521b803ff9c5
			</NameIdentifier>
			<SubjectConfirmation>
				<ConfirmationMethod>
				  urn:oasis:names:tc:SAML:1.0:cm:bearer
				</ConfirmationMethod>
			</SubjectConfirmation>
		</Subject>
		<Attribute
		   AttributeName="urn:mace:terena.org:schac:schacsn2"
		   AttributeNamespace="urn:mace:shibboleth:1.0:attributeNamespace:uri">
			<AttributeValue/>
			</Attribute>
	</AttributeStatement>
	<AttributeStatement>
		<Subject>
			<NameIdentifier
			   Format="urn:mace:shibboleth:1.0:nameIdentifier"
			   NameQualifier="urn:mace:switch.ch:aaitest:edugain-login.switch.ch">
			  8c9b3696f140614ce8ee5ce320c3521b803ff9c5
			</NameIdentifier>
			<SubjectConfirmation>
				<ConfirmationMethod>
				  urn:oasis:names:tc:SAML:1.0:cm:bearer
				</ConfirmationMethod>
			</SubjectConfirmation>
		</Subject>
		<Attribute
		   AttributeName="urn:mace:dir:attribute-def:eduPersonScopedAffiliation"
		   AttributeNamespace="urn:mace:shibboleth:1.0:attributeNamespace:uri">
			<AttributeValue>
			  role
			</AttributeValue>
		</Attribute>
	</AttributeStatement>
	<AttributeStatement>
		<Subject>
			<NameIdentifier
			   Format="urn:mace:shibboleth:1.0:nameIdentifier"
			   NameQualifier="urn:mace:switch.ch:aaitest:edugain-login.switch.ch">
			  8c9b3696f140614ce8ee5ce320c3521b803ff9c5
			</NameIdentifier>
			<SubjectConfirmation>
				<ConfirmationMethod>
				  urn:oasis:names:tc:SAML:1.0:cm:bearer
				</ConfirmationMethod>
			</SubjectConfirmation>
		</Subject>
		<Attribute
		   AttributeName="urn:mace:dir:attribute-def:eduPersonPrincipalName"
		   AttributeNamespace="urn:mace:shibboleth:1.0:attributeNamespace:uri">
			<AttributeValue>
			  ajay
			</AttributeValue>
		</Attribute>
	</AttributeStatement>
	<AttributeStatement>
		<Subject>
			<NameIdentifier
			   Format="urn:mace:shibboleth:1.0:nameIdentifier"
			   NameQualifier="urn:mace:switch.ch:aaitest:edugain-login.switch.ch">
			  8c9b3696f140614ce8ee5ce320c3521b803ff9c5
			</NameIdentifier>
			<SubjectConfirmation>
				<ConfirmationMethod>
				  urn:oasis:names:tc:SAML:1.0:cm:bearer
				</ConfirmationMethod>
			</SubjectConfirmation>
		</Subject>
		<Attribute
		   AttributeName="urn:mace:terena.org:schac:schacsn1"
		   AttributeNamespace="urn:mace:shibboleth:1.0:attributeNamespace:uri">
			<AttributeValue/>
			</Attribute>
	</AttributeStatement>
	<AttributeStatement>
		<Subject>
			<NameIdentifier
			   Format="urn:mace:shibboleth:1.0:nameIdentifier"
			   NameQualifier="urn:mace:switch.ch:aaitest:edugain-login.switch.ch">
			  8c9b3696f140614ce8ee5ce320c3521b803ff9c5
			</NameIdentifier>
			<SubjectConfirmation>
				<ConfirmationMethod>
				  urn:oasis:names:tc:SAML:1.0:cm:bearer
				</ConfirmationMethod>
			</SubjectConfirmation>
		</Subject>
		<Attribute
		   AttributeName="urn:mace:dir:attribute-def:eduPersonTargetedId"
		   AttributeNamespace="urn:mace:shibboleth:1.0:attributeNamespace:uri">
			<AttributeValue>
			  
			</AttributeValue>
		</Attribute>
	</AttributeStatement>
	<AttributeStatement>
		<Subject>
			<NameIdentifier
			   Format="urn:mace:shibboleth:1.0:nameIdentifier"
			   NameQualifier="urn:mace:switch.ch:aaitest:edugain-login.switch.ch">
			  8c9b3696f140614ce8ee5ce320c3521b803ff9c5
			</NameIdentifier>
			<SubjectConfirmation>
				<ConfirmationMethod>
				  urn:oasis:names:tc:SAML:1.0:cm:bearer
				</ConfirmationMethod>
			</SubjectConfirmation>
		</Subject>
		<Attribute
		   AttributeName="urn:mace:dir:attribute-def:sn"
		   AttributeNamespace="urn:mace:shibboleth:1.0:attributeNamespace:uri">
			<AttributeValue/>
			</Attribute>
	</AttributeStatement>
	<AttributeStatement>
		<Subject>
			<NameIdentifier
			   Format="urn:mace:shibboleth:1.0:nameIdentifier"
			   NameQualifier="urn:mace:switch.ch:aaitest:edugain-login.switch.ch">
			  8c9b3696f140614ce8ee5ce320c3521b803ff9c5
			</NameIdentifier>
			<SubjectConfirmation>
				<ConfirmationMethod>
				  urn:oasis:names:tc:SAML:1.0:cm:bearer
				</ConfirmationMethod>
			</SubjectConfirmation>
		</Subject>
		<Attribute
		   AttributeName="urn:mace:dir:attribute-def:eduPersonEntitlement"
		   AttributeNamespace="urn:mace:shibboleth:1.0:attributeNamespace:uri">
			<AttributeValue>
			  tecniris-peradmin
			</AttributeValue>
		</Attribute>
	</AttributeStatement>
</Assertion>

--
Cándido Rodríguez Montes E-mail: 
Red.ES/RedIRIS Tel:+34 955 05 66 13
Edificio CICA
Avenida Reina Mercedes, s/n
41012 Sevilla
SPAIN


  • [AA] SAML Assertion example, Cándido Rodríguez Montes, 02/07/2007

Archive powered by MHonArc 2.6.16.

Top of Page