[java-identity-provider COMMIT] /trunk/idp-conf/src/main/resources/system/flows/saml/saml-abstract-flow.xml
noreply at shibboleth.net
noreply at shibboleth.net
Sat Mar 29 14:43:11 EDT 2014
Author: scantor
Date: Sat Mar 29 14:43:10 2014
New Revision: 5660
URL: http://svn.shibboleth.net/view/java-identity-provider?rev=5660&view=rev
Log:
Add TODOs for security parameter steps.
Modified:
trunk/idp-conf/src/main/resources/system/flows/saml/saml-abstract-flow.xml
Modified: trunk/idp-conf/src/main/resources/system/flows/saml/saml-abstract-flow.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/flows/saml/saml-abstract-flow.xml?rev=5660&r1=5659&r2=5660&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/flows/saml/saml-abstract-flow.xml (original)
+++ trunk/idp-conf/src/main/resources/system/flows/saml/saml-abstract-flow.xml Sat Mar 29 14:43:10 2014
@@ -32,6 +32,10 @@
<transition on="proceed" to="InitializeOutboundMessageContext" />
</action-state>
+ <!-- TODO: Action to populate SignatureValidationParameters on inbound context. -->
+
+ <!-- TODO: Action to invoke dynamically established message handler chain. -->
+
<!-- Request Checking and Preliminaries -->
<action-state id="InitializeOutboundMessageContext">
@@ -47,6 +51,7 @@
<!-- Pull SAML Subject if present and turn it into a principal name. -->
<!-- TODO: action to populate DecryptionParameters on inbound context. -->
+
<action-state id="DecryptNameIDs">
<evaluate expression="DecryptNameIDs" />
<transition on="proceed" to="ExtractSubjectFromRequest" />
@@ -69,6 +74,10 @@
<evaluate expression="FinalizeSAMLSubjectCanonicalization" />
<transition on="proceed" to="DoProfileWork" />
</action-state>
+
+ <!-- TODO: action to populate SigningParameters on outbound and/or RP context. -->
+
+ <!-- TODO: action to check encryption options and set EncryptionParameters on RP context. -->
<!--
The meat will be inserted here by defining DoProfileWork and transitioning from
More information about the commits
mailing list