Some SAML 1 flow questions

[Cantor, Scott]

On 2/4/14, 11:52 AM, "Tom Zeller" <tzeller at dragonacea.biz> wrote:
>
>In the outbound message context :
>
> SAMLPeerEntityContext.setEntityId()
>
>and
>
> SAMLEndpointContext.setEndpoint()
>
>But it seems I should omit the latter from the SAML 1 flow since there
>is no metadata, but that seems wrong.

It's wrong, there is always metadata, but I don't think you'll set it in
an initial action that sets up the context. I would have a separate action
deal with endpoint verification and selection, you can punt it to me to
write.

The first thing is something you'd copy from the inbound context (or you'd
pull it from BasicMessageMetadataContext but I think the direction there
is to rethink that context). Since this is a SAML flow and action, you
don't need an abstracted notion of this datum, it's just there on the
inbound copy of that same context).

As part of feeding the endpoint selection/verification step, I don't know
what Brent thinks, but I'm inclined to suggest we want to have a SAML
message context child representing the "requested response
endpoint/binding" and have the MessageDecoders populate that. Maybe that's
overkill, but I like the idea of not having to plow into the AuthnRequest
(or the SAML 1 pseudo-message) for that data after the fact.

-- Scott