Adding <wsa:EndpointReference> element to <wst:OnBehalfOf> element
Gina Choi
gchoi at sdl.com
Mon Mar 26 23:16:53 BST 2012
Hi All,
I am looking at WS-Trust 1.3 OASIS Standard 19 March 2007 from line
1893-1901(http://docs.oasis-open.org/ws-sx/ws-trust/200512/ws-trust-1.3-os.pd
f
). Based on specification, we should be able to add OnBehalfOf element to
RequestSecurityToken and OnBehalfOf element can have EndPointReference as a
sub-elelment. I try to use onbehalfof.getUnknownXMLObject().add to add
EndPointReference to OnBehalfOf, but "add" method isn't available to
org.opensaml.ws.wstrust.OnBehalfOf element.
1893 /wst:RequestSecurityToken/wst:OnBehalfOf
1894 This optional element indicates that the requestor is making the request
on behalf of another.
1895 The identity on whose behalf the request is being made is specified by
placing a security token,
1896 <wsse:SecurityTokenReference> element, or <wsa:EndpointReference>
element
1897 within the <wst:OnBehalfOf> element. The requestor MAY provide proof of
possession of the
1898 key associated with the OnBehalfOf identity by including a signature in
the RST security header
1899 generated using the OnBehalfOf token that signs the primary signature of
the RST (i.e. endorsing
1900 supporting token concept from WS-SecurityPolicy). Additional signed
supporting token
1901 describing the OnBehalfOf context MAY also be included within the RST
security header
Thanks.
Gina
More information about the dev
mailing list