Some SAML 1 flow questions

Tom Zeller tzeller at dragonacea.biz
Tue Feb 4 11:23:58 EST 2014


There will only be one SAML 1 flow, correct ?

I am not sure how to handle the non-SAMLObject inbound message unique
to the SAML 1 flow. In the InitializeOutboundMessageContext action,
which I mocked up based on the testbed's
PrepareOutboundMessageContext, I guess it is easy enough to check for
the IdPInitiatedSSORequest as the inbound message via instanceof in
the action doPreExecute() method, but maybe that code should be
injected.

So, I guess my question is : should the uniqueness of the SAML 1 flow
be coded inside actions or somehow via Spring wiring ?

And as a follow up, do we think we will have both SAML 1 and 2
versions of the InitializeOutboundMessageContext action ?

Thanks.


More information about the dev mailing list