changing OpenSAML namespace prefix

[Chad La Joie]

Well, if they don't support XML (which is what they're saying), then
good luck with whatever comes next.

But yes, you can change the prefix, just use the builder method that
takes the full element QName instead of relying on the default, no-arg
method.

On 3/28/12 8:27 PM, Jeff Ott wrote:
> I am using Java OpenSAML 2.5.2 to generate a SAML response, and I'm 
> getting a Response prefix of saml1p (and the Assertion and enclosing 
> sections have a saml1 prefix).  I'm hoping to change both the saml1p and 
> saml1 prefixes to be samlp, since a vendor I'm working with believes 
> their server might not be accepting the saml1p/saml1 combination for 
> some reason.  This is some of the (hopefully relevant) code
> 
> import org.opensaml.Configuration;
> import org.opensaml.DefaultBootstrap;
> import org.opensaml.common.SAMLObjectBuilder;
> import org.opensaml.common.SAMLVersion;
> import org.opensaml.common.impl.SecureRandomIdentifierGenerator;
> import org.opensaml.saml1.core.Assertion;
> import org.opensaml.saml1.core.Response;
> import org.opensaml.saml1.core.impl.ResponseBuilder;
> import org.opensaml.saml1.core.impl.ResponseMarshaller;
> import org.opensaml.xml.XMLObjectBuilder;
> import org.opensaml.xml.XMLObjectBuilderFactory;
> import org.w3c.dom.Element;
> 
> public class SamlBuilder {
> 
>      private static XMLObjectBuilderFactory builderFactory;
>      private static SecureRandomIdentifierGenerator generator;
> 
>      static {
>          try {
>              DefaultBootstrap.bootstrap();
>              builderFactory = Configuration.getBuilderFactory();
>              generator = new SecureRandomIdentifierGenerator();
> 
>          } catch (ConfigurationException e) {
>              new AccountUtilsLogger().error("unexpected exception", e);
> 
>          } catch (NoSuchAlgorithmException e) {
>              new AccountUtilsLogger().error("unexpected exception", e);
>          }
>      }
> 
>      public String buildSaml() {
>          ResponseBuilder responseBuilder = (ResponseBuilder) 
> builderFactory.getBuilder(Response.DEFAULT_ELEMENT_NAME);
>          Response authResponse = responseBuilder.buildObject();
> ...
>          SAMLObjectBuilder<?> assertionBuilder = (SAMLObjectBuilder<?>) 
> builderFactory.getBuilder(Assertion.DEFAULT_ELEMENT_NAME);
>          Assertion assertion = (Assertion) assertionBuilder.buildObject();
> ...
>          authResponse.getAssertions().add(assertion);
> ...
>          Element element = new ResponseMarshaller().marshall(authResponse);
> ...
>      }
> }
> 
> and the resulting Response looks something like this
> 
> <?xml version="1.0" encoding="UTF-8"?><saml1p:Response 
> xmlns:saml1p="urn:oasis:names:tc:SAML:1.0:protocol" 
> IssueInstant="2012-03-28T22:15:25.367Z" MajorVersion="1" 
> MinorVersion="1" 
> ResponseID="_c8891aaad0161d2f9e021f094e65267a"><saml1p:Status><saml1p:StatusCode 
> Value="saml1p:Success"/></saml1p:Status><saml1:Assertion 
> xmlns:saml1="urn:oasis:names:tc:SAML:1.0:assertion" 
> AssertionID="_e1b3737432f1a639d908f24524c76d90" 
> IssueInstant="2012-03-28T22:15:25.367Z" 
> Issuer="https://www.purdue.edu/apps/account" MajorVersion="1" 
> MinorVersion="0"><saml1:Conditions NotBefore="2012-03-28T22:15:23.367Z" 
> NotOnOrAfter="2012-03-28T22:15:28.367Z"/><saml1:AuthenticationStatement 
> AuthenticationInstant="2012-03-28T22:15:25.367Z" 
> AuthenticationMethod="urn:oasis:names:tc:SAML:1.0:am:password"><saml1:Subject><saml1:NameIdentifier 
> Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">someone at purdue.edu</saml1:NameIdentifier><saml1:SubjectConfirmation><saml1:ConfirmationMethod>urn:oasis:names:tc:SAML:1.0:cm:bearer</saml1:ConfirmationMethod></saml1:SubjectConfirmation></saml1:Subject></saml1:AuthenticationStatement><saml1:AttributeStatement/></saml1:Assertion></saml1p:Response>
> 
> I am hoping someone can point me in the right direction for what code 
> changes to make, I'm not succeeding at figuring it out so far.  I 
> appreciate the efforts of those who have developed and supported the 
> OpenSAML library, thanks for those efforts, and for your time in reading 
> this!
> 
> Jeff
> --
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net