Re: Support for SAML 2.0 in Apache Rampart

[Thilina Mahesh Buddhika <th...@gmail.com>]

Hi Daniel,

SAML 2.0 support will be available very soon in Rampart, and hopefully it
will be included in the Rampart 1.5 release. Currently I am working on
samples/tests for SAML2.0 support. Stay tuned to this thread. I will update
it as soon as the code is available in the Rampart code base.

Do you want to validate a SAML 2.0 assertion ? If so that is not possible
with the existing Rampart code. But if you want to validate a SAML1.1/1.0
assertion, it is possible to use SAMLTokenProcessor class available in the
org.apache.ws.security.processor package in WSS4J. Rampart makes use of that
class to validate SAML1.1 assertions. I have not encountered any usage of
SAMLTokenValidator class you mentioned.

Thanks.

best regards,
/thilina
E-Mail         : thilinamb@gmail.com
I blog here : http://thilinamb.com


On Tue, Jul 28, 2009 at 4:26 PM, Daniel Silva <da...@alert.pt> wrote:

> Hi,
>
> I'm developing a Web Service that needs to enforce access control based on
> the user (Subject/NameID) received on a SAML 2.0 Assertion.
> I see that rampart doesn´t support SAML 2.0 yet and there is work already
> done by Thilina.
> I need to move forward on this... Is there anything I can do/use?
> What would be the steps to validate the SAML Assertion? Can I use
> SAMLTokenValidator as example?
>
> BTW, when will be rampart 1.5 released?
>
> Thank you very much.
>
> Best regards,
>
> Daniel Silva
>
> This e-mail is privileged, confidential and contains private information.
> Any reading, retention, distribution or copying of this communication by any
> person other than its intended recipient is prohibited.
>
>
> -----Original Message-----
> From: Thilina Mahesh Buddhika [mailto:thilinamb@gmail.com]
> Sent: sábado, 25 de Julho de 2009 12:27
> To: rampart-dev@ws.apache.org
> Subject: Re: Support for SAML 2.0 in Apache Rampart
>
> hi Nandana,
>
> I have completed implementing a SAML2 Issuer and the validator. Only a
> small
> work is remaining to complete this feature.
>
> Hopefully we will be able to finish this before the relase.
>
> Thanks.
> /thilina
>
> E-Mail         : thilinamb@gmail.com
> I blog here : http://thilinamb.com
>
>
> On Fri, Jul 24, 2009 at 6:27 PM, Nandana Mihindukulasooriya <
> nandana.cse@gmail.com> wrote:
>
> > Hi Thilina,
> >       How is the progress on this ? Will we be able to include this in
> > Rampart 1.5 release ?
> >
> > thanks,
> > Nandana
> >
> > On Thu, Jun 18, 2009 at 9:46 AM, Thilina Mahesh Buddhika <
> > thilinamb@gmail.com> wrote:
> >
> > > Hi all,
> > >
> > > At the moment Rampart only supports SAML 1.0, but not SAML 2.0. SAML
> 2.0
> > > comes with a lot of improvements compared to SAML 1.*, and it is
> heavily
> > > used in providing SSO and federated identities.
> > >
> > > So I would like to implement the SAML 2.0 support in Rampart. I have
> > > already
> > > started working on this. The JIRA that was created for this new feature
> > can
> > > be found at [1].
> > >
> > > Thanks.
> > >
> > > /thilina.
> > >
> > > [1] - https://issues.apache.org/jira/browse/RAMPART-231
> > >
> > > E-Mail         : thilinamb@gmail.com
> > > I blog here : http://thilinamb.com
> > >
> >
>