Reading WS-Federation metadata using OpenSAML?
Lasse Højgaard
lash at stibosystems.com
Mon Jun 12 06:29:13 EDT 2017
Hi all,
I'm supposed to implement WS-Fed SSO (with SAML Tokens) for a Relying Party.
It seems that my best would be Apache CXF Fediz, but as far as I know it doesn't support consuming metadata (only publishing).
An example of the kind of the metadata can be seen here:
https://login.microsoftonline.com/common/FederationMetadata/2007-06/FederationMetadata.xml
Is it possible to consume WS-Federation metadata using fx a FileBackedHTTPMetadataResolver from OpenSAML?
I tried doing it, but cannot get it to work. Possibly due to a mismatch with the XML NS used for
RoleDescriptors:
<RoleDescriptor xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:fed="http://docs.oasis-open.org/wsfed/federation/200706"
xsi:type="fed:SecurityTokenServiceType"
protocolSupportEnumeration="http://docs.oasis-open.org/wsfed/federation/200706"
ServiceDescription="XYZ">
One way I see to get it working is to instruct OpenSAML to accept the federation namespace, if possible.
Is it possible to extract the resulting DOM of the Metadata after calling resolveSingle(CeriteriaSet c)
Thank you in advance.
Kind regards,
Lasse Højgaard
More information about the dev
mailing list