Parsing Trust Engines

[Cantor, Scott]

On 6/19/14, 9:09 AM, "Rod Widdowson" <rdw at steadingsoftware.com> wrote:
>
>The SignatureValidation filter requires that a SignatureTrustEngine be
>injected.  This would seem to rule it being configured with any of the
>Credential Trust Engines.
>
>Hence, if I understand correctly, only the following types can be injected
>into a SignatureValidation filter
>
>	SignatureChaining
>	StaticPKIXSignature
>	StaticExplicitKeySignature
>
>and we only need to parse them.
>
>For the record the remaining types are:
>
>	StaticPKIXX509Credential
>	StaticExplicitKey
>	Chaining

I'd defer to Brent, but in the SP, you have the use case in the Dynamic
provider of using transport authentication, and that's not a Signature
trust engine.

I don't know if the code in the IdP for this is capable of using the
transport.

-- Scott