SAML XML.org - Online community for the Security Assertion Markup Language (SAML) OASIS Standard
https://saml.xml.org
Welcome to SAML XML.org.
This is the official community gathering place and information resource for the SAML OASIS Standard. SAML provides an XML-based framework for creating and exchanging security information between online partners.
This is a community-driven site, and the public is encouraged to contribute content.enSAML 2.0 with java Sample
https://saml.xml.org/forum/saml-20-with-java-sample
<p>
Hi,
</p>
<p>
can someone give me a short example for making a SOAP request for a SAML 2 token (with username and password) with JAVA. The SAML 2 token should be used in another Request for a different web service (as Header). Couldn't find usefull examples by searching the internet. Also a example for encrypted request is needed. Are they any usefull libs to use?
</p>
<p>
Tried it with apache axis, but didn't work (encrypted).
</p>
<p>
</p>
<p>
Thx,
</p>
<p>
Dominik
</p>
https://saml.xml.org/forum/saml-20-with-java-sample#commentsUsing SAMLTue, 05 Nov 2013 18:42:52 +0000Dk19841154 at https://saml.xml.orgIdentity propagation with SAML
https://saml.xml.org/forum/identity-propagation-with-saml
<p>
Hello,
</p>
<p>
In my scenario I have the following entities:
</p>
<p>
- SAML secured Portal (Domain A)
</p>
<p>
- User
</p>
<p>
- SAML secured API( Domain B, so different domain than the portal)
</p>
<p><a href="https://saml.xml.org/forum/identity-propagation-with-saml">read more</a></p>https://saml.xml.org/forum/identity-propagation-with-saml#commentsUsing SAMLMon, 08 Jul 2013 08:00:04 +0000[email protected]650 at https://saml.xml.orgSP and IDP implementation
https://saml.xml.org/forum/sp-and-idp-implementation
<p>I am implementing a Service Provider in java and an IDP in java, which is necessary to implement in order to comply with a basic implementation?</p>
https://saml.xml.org/forum/sp-and-idp-implementation#commentsUsing SAMLThu, 23 May 2013 22:27:55 +0000euprogramador617 at https://saml.xml.orgLogout Request if necessary signed?
https://saml.xml.org/forum/logout-request-if-necessary-signed
<p>a logout request, which must be signed? the application service provider for the idp, idp or response to the service provider? is it really necessary to sign the service provider?</p>
https://saml.xml.org/forum/logout-request-if-necessary-signed#commentsUsing SAMLThu, 23 May 2013 22:24:31 +0000euprogramador616 at https://saml.xml.orgHow to intercept saml authnrequest
https://saml.xml.org/forum/how-to-intercept-saml-authnrequest
<p>
I am using SAML2 authentication engine. I would like to log the SAML Request AND SAML Response. How do I intercept the request and response using idp-metadata.xml or attribute-resolver.xml or handler.xml
</p>
<p>
Any help would be appreciated
</p>
https://saml.xml.org/forum/how-to-intercept-saml-authnrequest#commentsHelp wanted Wed, 15 May 2013 16:05:53 +0000kotesh201615 at https://saml.xml.orgHow to create SAML2XMLObject
https://saml.xml.org/forum/how-to-create-saml2xmlobject
<p>
I am using standard SAML2.0 Authentication engine for authentication purpose. I am able to access the JAVA objects using script attribute from SAML. But I need to send the XML objects as additional attributes in SAML response ( in assertion ). For this I am trying to hard code as below. If this works I can extend this to JAVA objects.
</p>
<p><a href="https://saml.xml.org/forum/how-to-create-saml2xmlobject">read more</a></p>https://saml.xml.org/forum/how-to-create-saml2xmlobject#commentsHelp wanted Wed, 15 May 2013 13:46:46 +0000kotesh201614 at https://saml.xml.orgLogoutRequest
https://saml.xml.org/forum/logoutrequest
<p>
I connect with a saml message to a portal. When i try make logout with other saml message, the portal send me one error in your saml response.
</p>
<p>
</p>
<p>
error:
</p>
<Status>
<StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Requester">
<StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:RequestDenied" />
</StatusCode>
<StatusMessage>urn:oasis:names:tc:SAML:2.0:status:RequestDenied (urn:oasis:names:tc:SAML:2.0:status:InvalidAttrNameOrValue)</StatusMessage>
</Status>
<p>
</p>
<p><a href="https://saml.xml.org/forum/logoutrequest">read more</a></p>https://saml.xml.org/forum/logoutrequest#commentsUsing SAMLThu, 09 May 2013 09:07:38 +0000filipe.queiros612 at https://saml.xml.orgInWebo
https://saml.xml.org/product/inwebo
<p><a href="https://saml.xml.org/product/inwebo">read more</a></p>https://saml.xml.org/product/inwebo#commentsFri, 05 Apr 2013 12:15:01 +0000In-Webo Technologies609 at https://saml.xml.orgCan i create a session in SP from IDP?
https://saml.xml.org/forum/can-i-create-a-session-in-sp-from-idp
I have an arquitecture with two SPs and an unique IDP. My question is if SAML provides some way to create a session in an SP from IDP when the other SP creates an session. Sorry for my english, if some part doesn't understand correctly i try to explain me better.
<br />
Thanks..
https://saml.xml.org/forum/can-i-create-a-session-in-sp-from-idp#commentsUsing SAMLWed, 03 Apr 2013 09:04:15 +0000neotello608 at https://saml.xml.orgSP certificate - per app or per app-instance
https://saml.xml.org/forum/sp-certificate-per-app-or-per-app-instance
<p>
Hi all,
</p>
<p>
I have a SAML SP app implemented with simpleSamlPHP (<a href="http://simplesamlphp.org/" title="http://simplesamlphp.org/" rel="nofollow">http://simplesamlphp.org/</a>).
</p>
<p>
the application can be used by multiple independent organizations (think of a CMS as example).
</p>
<p>
in order to be able to support some Shibboleth IdPs requirements I have to have my application encrypt its SAML assertions, so I need to work with certificate and provide the IdP with my certificate.
</p>
<p>
</p>
<p>
my question is:
</p>
<p><a href="https://saml.xml.org/forum/sp-certificate-per-app-or-per-app-instance">read more</a></p>https://saml.xml.org/forum/sp-certificate-per-app-or-per-app-instance#commentsUsing SAMLTue, 02 Apr 2013 09:03:43 +0000gonen607 at https://saml.xml.org