Does openws1.4.2 support RequestSecurityToken?

[Brent Putman]

On 3/14/12 1:35 PM, Gina Choi wrote:

> I built AuthnRequest using OpenSAML libraries recently. Is this same concept?

Yes, it's exactly the same concept.  You use builders to create new
instances of the desired XMLObjects, mutate them as you like, build up a
tree that represents the XML you need and then marshall the XMLObject
tree to a DOM.


> Can I find some sample code from anywhere? By the way, my STS is ADFS2.0.

I don't think we have any sample code for the WS-Trust and other  WS-*
schemas per se.  Possibly there is something in the openws unit tests. 
But as I said above, it's exactly the same concept and procedure to
build and marshall a WS-Trust RST XML structure as a SAML 2 AuthnRequest
one.


> I guess that I need to implement SOAO call by myself.

Actually, I forgot to mention that we do have a rudimentary SOAP client,
based on Apache HttpClient.  There is a basic example of its use here in
the wiki:

https://wiki.shibboleth.net/confluence/display/OpenSAML/OSTwoUserManJavaSOAPClientExample

It basically just takes a complete Envelope XMLObject, sends it and
provides the the Envelope object that is the received back as the
response.  So it doesn't do anything fancy with Envelope handling, like
generate or process headers, that's something that needs to be done by
the caller.