Does openws1.4.2 support RequestSecurityToken?

[Gina Choi]

I try to build following RequestSecurityToken. 

<trust:RequestSecurityToken
xmlns:trust="http://docs.oasis-open.org/ws-sx/ws-trust/200512">
  <wsp:AppliesTo xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy">
    <a:EndpointReference>
      <a:Address>https://yourcompany.com</a:Address>
    </a:EndpointReference>
  </wsp:AppliesTo>
 
<trust:KeyType>http://docs.oasis-open.org/ws-sx/ws-trust/200512/Bearer</trust
:KeyType>
 
<trust:RequestType>http://docs.oasis-open.org/ws-sx/ws-trust/200512/Issue</tr
ust:RequestType>
  <trust:TokenType>urn:oasis:names:tc:SAML:2.0:assertion</trust:TokenType>
</trust:RequestSecurityToken>


>Yes, it implements the Java-XML binding, so you can build up the XML
>using a Java object model and then marshall it to a DOM structure (just
I built AuthnRequest using OpenSAML libraries recently. Is this same concept?
Can I find some sample code from anywhere? By the way, my STS is ADFS2.0.

>like all the other schemas that OpenSAML supports, like SAML itself).

>There isn't any higher level support for actually doing the SOAP call,
>protocol message handling, etc.  That's all functionality that would for
>example be built on top of OpenSAML. I don't know personally whether
>there are libraries that actually do that for WS-Trust using OpenSAML,
>like WSS4J does to provide SAML Assertion token support for WS-Security
>via OpenSAML.
I guess that I need to implement SOAO call by myself.


>I'm sure there are non-OpenSAML based libraries that have various types
>of WS-Trust protocol support.
Since I found out that I can build ReqeustSecurityToken using
openws-1.4.1.jar, I don't need to look for other libraries.

Thanks.

Gina

Message: 5
Date: Tue, 13 Mar 2012 05:27:54 -1200
From: Gina Choi <gchoi at sdl.com>
Subject: Does openws1.4.2 support RequestSecurityToken?
To: <dev at shibboleth.net>
Message-ID:
	<199C35CD64E44140A34EB403EA9F70735E6BA4 at wakemail0303.global.sdl.corp>
Content-Type: text/plain; charset="us-ascii"

 

Hi,

 

I am planning to build RequestSecurityToken and send it over to STS to
receive RequestSecurityTokenResponse. I looked at APIs for openws-1.4.2.jar
and there is a RequestSecurityTokenImpl.java class which implemented
RequestSecurityToken interface, but RequestSecurityTokenImpl.java class is
very simple. Is this something that I can use to build RequestSecurityToken
to send to STS or I should look for some other libraries?

 

Thanks.

 

Gina Choi

-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://shibboleth.net/pipermail/dev/attachments/20120313/e2682f45/attachment-
0001.html 

------------------------------

Message: 6
Date: Tue, 13 Mar 2012 15:33:14 -0400
From: Brent Putman <putmanb at georgetown.edu>
Subject: Re: Does openws1.4.2 support RequestSecurityToken?
To: dev at shibboleth.net
Message-ID: <4F5FA0FA.1080201 at georgetown.edu>
Content-Type: text/plain; charset=ISO-8859-1



On 3/13/12 1:27 PM, Gina Choi wrote:
>  
> 
> Hi,
> 
>  
> 
> I am planning to build RequestSecurityToken and send it over to STS to
> receive RequestSecurityTokenResponse. I looked at APIs for
> openws-1.4.2.jar 


I don't think there's any significant difference in the WS-Trust
support, but the latest openws is 1.4.4.  You might want to consider
using the latest version of the OpenSAML stack, just to get all the
latest bug fixes, etc.


> and there is a RequestSecurityTokenImpl.java class
> which implemented RequestSecurityToken interface, but
> RequestSecurityTokenImpl.java class is very simple.




I don't know what you mean by "very simple".  It implements the schema
for that element as defined in WS-Trust.  No more, no less.



> Is this something
> that I can use to build RequestSecurityToken to send to STS or I should
> look for some other libraries?
>



Yes, it implements the Java-XML binding, so you can build up the XML
using a Java object model and then marshall it to a DOM structure (just
like all the other schemas that OpenSAML supports, like SAML itself).

There isn't any higher level support for actually doing the SOAP call,
protocol message handling, etc.  That's all functionality that would for
example be built on top of OpenSAML. I don't know personally whether
there are libraries that actually do that for WS-Trust using OpenSAML,
like WSS4J does to provide SAML Assertion token support for WS-Security
via OpenSAML.

I'm sure there are non-OpenSAML based libraries that have various types
of WS-Trust protocol support.