Requesting new Assertion to STS

[Gina Choi]

Hi All,

This is what I try to achieve. The SP already logged the user in and is
requesting a new assertion to STS but corresponding to another Relying Party
in STS. Is this possible with passive AuthnRequest? I read following link and
it is pretty close to what I want to do.
http://lists.oasis-open.org/archives/saml-dev/200605/msg00051.html


The following is AuthnRequest token that I have. Since user is already logged
in, I have NameID value of "gchoi" and user is logged on SP "
https://wkensv0306.global.sdl.corp:8443/Airline/code/Welcome.jsp". I try to
get assertion token corresponding to Relying Party "
https://wkensv0305.global.sdl.corp:8443/Airline/code/Welcome.jsp".

I am working with a guy on the same project, but he is on .NET side and he
seems build everything real quickly using WIF and WCF. On .NET side, they are
getting bootstrap token, but I think that it is a Microsoft term.

I am trying to figure out if I need to improve my AuthnRequest to get
assertion token that I needed.

<?xml version="1.0" encoding="UTF-8"?>
<samlp:AuthnRequest
AssertionConsumerServiceURL="https://wkensv0306.global.sdl.corp:8443/Airline/
code/Welcome.jsp" 
					ForceAuthn="false"
ID="_f0466908fc171ac4df4a6ac66be3a65bc6e8dbb01b19fadd"
					IsPassive="true"
IssueInstant="2012-03-20T18:43:28.829Z" 
	
ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
					Version="2.0"
xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">
	<samlp:Issuer xmlns:samlp="urn:oasis:names:tc:SAML:2.0:assertion">
	
https://wkensv0305.global.sdl.corp:8443/Airline/code/Welcome.jsp
	</samlp:Issuer><samlp:Subject
xmlns:samlp="urn:oasis:names:tc:SAML:2.0:assertion">
	<samlp:NameID
xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">gchoi</samlp:NameID>
	</samlp:Subject>
</samlp:AuthnRequest>

Thanks.

Gina Choi