Configuring C14N for NameID lookup
Cantor, Scott
cantor.2 at osu.edu
Tue Feb 11 11:20:43 EST 2014
On 2/11/14, 10:05 AM, "Rod Widdowson" <rdw at steadingsoftware.com> wrote:
>> I'll take a look, but that wasn't my plan. I wanted the formats all in
>>one
>> place.
>
>That¹s what I thought which is why I mentioned it. If you want to
>contrast, NameIdentifierCanonicalization does it the old way (although
>this
>is non deployable because the Predicate is non static), whereas the
>NameIDCanonicalization has the static Predicate, but that is what does the
>format comparison.
Ok, I get it now. I moved the predicate off the action bean into those
c14n flow descriptor beans, so the format list has to be delcared on the
predicate, not the action, and has to be a static class. I forgot what I
did.
Since I hadn't wired up those flows yet, I didn't have a full picture.
I'll see if I can come up with something that makes sense to me. It's
still not quite as elegant as I was hoping for, but I guess the problem is
that the format check needs to be in both places unless we somehow prevent
a deployer from circumventing the check in the flow descriptor step.
Also, to my annoyance, I somehow forgot to check in a copy of
subject-config.xml that had a whole bunch of XML defining the NameID
generation half, and it's apparently lost.
-- Scott
More information about the dev
mailing list