shibboleth-dev - handing off assertion from websso to STS translating to saml2 profile of security token

Subject: Shibboleth Developers

List archive

handing off assertion from websso to STS translating to saml2 profile of security token

From: Peter Williams <>
To: "" <>
Subject: handing off assertion from websso to STS translating to saml2 profile of security token
Date: Wed, 15 Apr 2009 09:42:37 -0700
Accept-language: en-US
Acceptlanguage: en-US

I now have an STS that can translate an assertion/token, including saml2 to saml2. The output profile is the security token to be attached to web service binding calls.

Is it reasonable for an SP to give the (now IDP-side) STS a Shib2 websso assertion for “token” translation – and then attach the resulting token to a web service call?

(Let’s assume the token would feature bearer confirmation, only, for now).

handing off assertion from websso to STS translating to saml2 profile of security token, Peter Williams, 04/15/2009
- RE: [Shib-Dev] handing off assertion from websso to STS translating to saml2 profile of security token, Scott Cantor, 04/15/2009
  - RE: [Shib-Dev] handing off assertion from websso to STS translating to saml2 profile of security token, Peter Williams, 04/15/2009
    - RE: [Shib-Dev] handing off assertion from websso to STS translating to saml2 profile of security token, Scott Cantor, 04/15/2009
      - RE: [Shib-Dev] handing off assertion from websso to STS translating to saml2 profile of security token, Peter Williams, 04/15/2009
        
        RE: [Shib-Dev] handing off assertion from websso to STS translating to saml2 profile of security token, Scott Cantor, 04/15/2009

List archive

handing off assertion from websso to STS translating to saml2 profile of security token