Stored Persistent Id and SAML1

Cantor, Scott cantor.2 at osu.edu
Wed Jun 25 13:05:15 EDT 2014


On 6/25/14, 1:02 PM, "Rod Widdowson" <rdw at steadingsoftware.com> wrote:

>> Is there a legacy one for SAML 1? Or did it just not see a difference?
>
>Sort of the latter, for me it¹s a plumbing artefact.  The legacy decoders
>need to provide a NameIDDecoder and a NameIdenfierDecoder as parameters to
>the constructor for the general purpose PrincipalConnector.  So when I
>see a
>principal connector of that type I need to summon up something to plug in.

Oh, ok, I overlooked that we hadn't put in the Spring configuration for
that PrincipalConnector or I would have realized.

Yeah, I would say just wire up a dummy of some kind, or if you're really
feeling adventurous I guess you could stick in a NameIdentifierDecoder
that assumes SPNameQualifier's value. That's kind of the problem, there is
no fidelity in SAML 1 to express the triple.

-- Scott




More information about the dev mailing list