SAML2.0 Assertions in CXF

["Morris Jr, David P" <da...@lmco.com>]

Is CXF currently supporting SAML2.0 Assertions? I have custom SAML2.0 assertion generation code on the client side, do need to validate the SAML2.0 assertions on the server side via interceptors? Or will CXF support this?

Thanks!

Dave

RE: SAML2.0 Assertions in CXF

[Gary Gregory <GG...@seagullsoftware.com>]

> -----Original Message-----
> From: Daniel Kulp [mailto:dkulp@apache.org]
> Sent: Wednesday, February 09, 2011 19:42
> To: users@cxf.apache.org
> Cc: Morris Jr, David P
> Subject: Re: SAML2.0 Assertions in CXF
> 
> On Wednesday 09 February 2011 1:19:16 pm Morris Jr, David P wrote:
> > Is CXF currently supporting SAML2.0 Assertions? I have custom SAML2.0
> > assertion generation code on the client side, do need to validate the
> > SAML2.0 assertions on the server side via interceptors? Or will CXF
> > support this?
> 
> Currently, you would need to do it yourself.
> 
> With 2.4, we'll be updating to WSS4J 1.6 (also in development) which has
> support for SAML 2 validation built in and thus it will be supported at
> that
> point.

Well, I am looking forward to that. I am about to engage on same SAML work myself...

Gary

> 
> --
> Daniel Kulp
> dkulp@apache.org
> http://dankulp.com/blog

Re: SAML2.0 Assertions in CXF

[Daniel Kulp <dk...@apache.org>]

On Wednesday 09 February 2011 1:19:16 pm Morris Jr, David P wrote:
> Is CXF currently supporting SAML2.0 Assertions? I have custom SAML2.0
> assertion generation code on the client side, do need to validate the
> SAML2.0 assertions on the server side via interceptors? Or will CXF
> support this?

Currently, you would need to do it yourself.  

With 2.4, we'll be updating to WSS4J 1.6 (also in development) which has 
support for SAML 2 validation built in and thus it will be supported at that 
point.

-- 
Daniel Kulp
dkulp@apache.org
http://dankulp.com/blog