<div dir="ltr"><span style="font-family:arial,sans-serif;font-size:13px">Hi All, </span><div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px"><div>I am migrating from JBoss 4.0.5 to JBoss 7.1. In this last version of JBoss, the class loader is heavily changed. Unfortunately this caused errors, I am not sure what can be the root cause of the exception attached. </div>
<div><br></div><div>I think it is an xml endorsing problem. Do you guys have any chance to run opensaml in jboss out of the box? The assertion correctly validates in a test environment (Junit under eclipse)</div><div><br>
</div><div>Thanks, </div><div><br></div><div><br></div><div>      Massi</div><div><br></div><div><p style="margin:0px;font-size:12px;font-family:Helvetica">org.opensaml.xml.validation.ValidationException: Unable to evaluate key against signature<br>
</p><p style="margin:0px;font-size:12px;font-family:Helvetica"><span style="white-space:pre-wrap">        </span>at com.spirit.saml.validators.DefaultSAMLAssertionValidator.checkSignature(DefaultSAMLAssertionValidator.java:249)</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica"><span style="white-space:pre-wrap">        </span>at com.spirit.saml.validators.DefaultSAMLAssertionValidator.validate(DefaultSAMLAssertionValidator.java:212)</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
<span style="white-space:pre-wrap">        </span>at com.spirit.saml.validators.PoTValidator.validate(PoTValidator.java:64)</p><p style="margin:0px;font-size:12px;font-family:Helvetica"><span style="white-space:pre-wrap">        </span>at com.spirit.proxy.handler.security.ValidatePOTAssertionHandler.handleRq(ValidatePOTAssertionHandler.java:28)</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica"><span style="white-space:pre-wrap">        </span>... 24 more</p><p style="margin:0px;font-size:12px;font-family:Helvetica">Caused by: org.opensaml.xml.validation.ValidationException: Unable to evaluate key against signature</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica"><span style="white-space:pre-wrap">        </span>at org.opensaml.xml.signature.SignatureValidator.validate(SignatureValidator.java:74)</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
<span style="white-space:pre-wrap">        </span>at com.spirit.saml.sign.validators.DefaultSignatureValidator.validate(DefaultSignatureValidator.java:44)</p><p style="margin:0px;font-size:12px;font-family:Helvetica"><span style="white-space:pre-wrap">        </span>at com.spirit.saml.sign.validators.DefaultSignatureValidator.validate(DefaultSignatureValidator.java:143)</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica"><span style="white-space:pre-wrap">        </span>at com.spirit.saml.validators.DefaultSAMLAssertionValidator.checkSignature(DefaultSAMLAssertionValidator.java:247)</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
<span style="white-space:pre-wrap">        </span>... 27 more</p><p style="margin:0px;font-size:12px;font-family:Helvetica">Caused by: org.apache.xml.security.signature.MissingResourceFailureException: The Reference for URI #_48569591-5178-4af0-ba30-1d654c9c487c has no XMLSignatureInput</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">Original Exception was org.apache.xml.security.signature.ReferenceNotInitializedException: Cannot resolve element with ID _48569591-5178-4af0-ba30-1d654c9c487c</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">Original Exception was org.apache.xml.security.signature.ReferenceNotInitializedException: Cannot resolve element with ID _48569591-5178-4af0-ba30-1d654c9c487c</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">Original Exception was org.apache.xml.security.signature.ReferenceNotInitializedException: Cannot resolve element with ID _48569591-5178-4af0-ba30-1d654c9c487c</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">Original Exception was org.apache.xml.security.utils.resolver.ResourceResolverException: Cannot resolve element with ID _48569591-5178-4af0-ba30-1d654c9c487c</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
<span style="white-space:pre-wrap">        </span>at org.apache.xml.security.signature.Manifest.verifyReferences(Manifest.java:414)</p><p style="margin:0px;font-size:12px;font-family:Helvetica"><span style="white-space:pre-wrap">        </span>at org.apache.xml.security.signature.SignedInfo.verify(SignedInfo.java:259)</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica"><span style="white-space:pre-wrap">        </span>at org.apache.xml.security.signature.XMLSignature.checkSignatureValue(XMLSignature.java:724)</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
<span style="white-space:pre-wrap">        </span>at org.opensaml.xml.signature.SignatureValidator.validate(SignatureValidator.java:69)</p><p style="margin:0px;font-size:12px;font-family:Helvetica"><span style="white-space:pre-wrap">        </span>... 30 more</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">Caused by: org.apache.xml.security.signature.ReferenceNotInitializedException: Cannot resolve element with ID _48569591-5178-4af0-ba30-1d654c9c487c</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
Original Exception was org.apache.xml.security.signature.ReferenceNotInitializedException: Cannot resolve element with ID _48569591-5178-4af0-ba30-1d654c9c487c</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
Original Exception was org.apache.xml.security.signature.ReferenceNotInitializedException: Cannot resolve element with ID _48569591-5178-4af0-ba30-1d654c9c487c</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
Original Exception was org.apache.xml.security.utils.resolver.ResourceResolverException: Cannot resolve element with ID _48569591-5178-4af0-ba30-1d654c9c487c</p><p style="margin:0px;font-size:12px;font-family:Helvetica"><span style="white-space:pre-wrap">        </span>at org.apache.xml.security.signature.Reference.calculateDigest(Reference.java:726)</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica"><span style="white-space:pre-wrap">        </span>at org.apache.xml.security.signature.Reference.verify(Reference.java:761)</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
<span style="white-space:pre-wrap">        </span>at org.apache.xml.security.signature.Manifest.verifyReferences(Manifest.java:336)</p><p style="margin:0px;font-size:12px;font-family:Helvetica"><span style="white-space:pre-wrap">        </span>... 33 more</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">Caused by: org.apache.xml.security.signature.ReferenceNotInitializedException: Cannot resolve element with ID _48569591-5178-4af0-ba30-1d654c9c487c</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
Original Exception was org.apache.xml.security.signature.ReferenceNotInitializedException: Cannot resolve element with ID _48569591-5178-4af0-ba30-1d654c9c487c</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
Original Exception was org.apache.xml.security.utils.resolver.ResourceResolverException: Cannot resolve element with ID _48569591-5178-4af0-ba30-1d654c9c487c</p><p style="margin:0px;font-size:12px;font-family:Helvetica"><span style="white-space:pre-wrap">        </span>at org.apache.xml.security.signature.Reference.dereferenceURIandPerformTransforms(Reference.java:621)</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica"><span style="white-space:pre-wrap">        </span>at org.apache.xml.security.signature.Reference.calculateDigest(Reference.java:705)</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
<span style="white-space:pre-wrap">        </span>... 35 more</p><p style="margin:0px;font-size:12px;font-family:Helvetica">Caused by: org.apache.xml.security.signature.ReferenceNotInitializedException: Cannot resolve element with ID _48569591-5178-4af0-ba30-1d654c9c487c</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">Original Exception was org.apache.xml.security.utils.resolver.ResourceResolverException: Cannot resolve element with ID _48569591-5178-4af0-ba30-1d654c9c487c</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
<span style="white-space:pre-wrap">        </span>at org.apache.xml.security.signature.Reference.getContentsBeforeTransformation(Reference.java:434)</p><p style="margin:0px;font-size:12px;font-family:Helvetica"><span style="white-space:pre-wrap">        </span>at org.apache.xml.security.signature.Reference.dereferenceURIandPerformTransforms(Reference.java:614)</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica"><span style="white-space:pre-wrap">        </span>... 36 more</p><p style="margin:0px;font-size:12px;font-family:Helvetica">Caused by: org.apache.xml.security.utils.resolver.ResourceResolverException: Cannot resolve element with ID _48569591-5178-4af0-ba30-1d654c9c487c</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica"><span style="white-space:pre-wrap">        </span>at org.apache.xml.security.utils.resolver.implementations.ResolverFragment.engineResolve(ResolverFragment.java:86)</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
<span style="white-space:pre-wrap">        </span>at org.apache.xml.security.utils.resolver.ResourceResolver.resolve(ResourceResolver.java:279)</p><p style="margin:0px;font-size:12px;font-family:Helvetica"><span style="white-space:pre-wrap">        </span>at org.apache.xml.security.signature.Reference.getContentsBeforeTransformation(Reference.java:432)</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica"><span style="white-space:pre-wrap">        </span>... 37 more</p><p style="margin:0px;font-size:12px;font-family:Helvetica"><br></p><p style="margin:0px;font-size:12px;font-family:Helvetica">
<br></p><p style="margin:0px;font-size:12px;font-family:Helvetica"> &lt;saml2:Assertion ID=&quot;_48569591-5178-4af0-ba30-1d654c9c487c&quot; IssueInstant=&quot;2013-11-19T14:50:29.098Z&quot; Version=&quot;2.0&quot; xmlns:saml2=&quot;urn:oasis:names:tc:SAML:2.0:assertion&quot; xmlns:xs=&quot;<a href="http://www.w3.org/2001/XMLSchema" target="_blank">http://www.w3.org/2001/XMLSchema</a>&quot;&gt;</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">        &lt;saml2:Issuer Format=&quot;urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified&quot;&gt;urn:tiani-spirit:sts&lt;/saml2:Issuer&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
        &lt;ds:Signature xmlns:ds=&quot;<a href="http://www.w3.org/2000/09/xmldsig#" target="_blank">http://www.w3.org/2000/09/xmldsig#</a>&quot;&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">          &lt;ds:SignedInfo&gt;</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">            &lt;ds:CanonicalizationMethod Algorithm=&quot;<a href="http://www.w3.org/2001/10/xml-exc-c14n#" target="_blank">http://www.w3.org/2001/10/xml-exc-c14n#</a>&quot;/&gt;</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">            &lt;ds:SignatureMethod Algorithm=&quot;<a href="http://www.w3.org/2000/09/xmldsig#rsa-sha1" target="_blank">http://www.w3.org/2000/09/xmldsig#rsa-sha1</a>&quot;/&gt;</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">            &lt;ds:Reference URI=&quot;#_48569591-5178-4af0-ba30-1d654c9c487c&quot;&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">              &lt;ds:Transforms&gt;</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">                &lt;ds:Transform Algorithm=&quot;<a href="http://www.w3.org/2000/09/xmldsig#enveloped-signature" target="_blank">http://www.w3.org/2000/09/xmldsig#enveloped-signature</a>&quot;/&gt;</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">                &lt;ds:Transform Algorithm=&quot;<a href="http://www.w3.org/2001/10/xml-exc-c14n#" target="_blank">http://www.w3.org/2001/10/xml-exc-c14n#</a>&quot;&gt;</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">                  &lt;ec:InclusiveNamespaces PrefixList=&quot;xs&quot; xmlns:ec=&quot;<a href="http://www.w3.org/2001/10/xml-exc-c14n#" target="_blank">http://www.w3.org/2001/10/xml-exc-c14n#</a>&quot;/&gt;</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">                &lt;/ds:Transform&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">              &lt;/ds:Transforms&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
              &lt;ds:DigestMethod Algorithm=&quot;<a href="http://www.w3.org/2000/09/xmldsig#sha1" target="_blank">http://www.w3.org/2000/09/xmldsig#sha1</a>&quot;/&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
              &lt;ds:DigestValue&gt;TeJNSuK5dBPxPBERW4V8mBgcQmE=&lt;/ds:DigestValue&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">            &lt;/ds:Reference&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
          &lt;/ds:SignedInfo&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">          &lt;ds:SignatureValue&gt;FckFNi27jqp2OgnU4DRP1e0UvLBoCuYzfu17Rps9K9X03rQ+jUSqPMKfUwXtIHvq0uZRFnZSPEDQlgfq+T5CrQw1UYlN2f+K2C5VSb/uGyt6IZQ9IPE0de9eAdPt0QD8gFiyKbCeYH4bxvXG+KKY3XDzsQ/g6Huzt9jFbM/S0TNhEElvyaY+J+pVx6/0bE7A4N5qKJ9GiyqGTbfuTw8gbhua1ip2upP6FJziaNsh0+MqZUbo8Sbd/XuIERFkABlN0ilWeJQbAnw06rcRg6FXLu8XxuchlvJ1eJ0HR8+GildlqEp50ZlgHRZncezMqS0ClD0YsPpFAurMze45bhe40g==&lt;/ds:SignatureValue&gt;</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">          &lt;ds:KeyInfo&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">            &lt;ds:X509Data&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
              &lt;ds:X509Certificate&gt;MIIEQTCCAymgAwIBAgIBAzANBgkqhkiG9w0BAQUFADCBrDELMAkGA1UEBhMCQVQxEDAOBgNVBAgT</p><p style="margin:0px;font-size:12px;font-family:Helvetica">B0F1c3RyaWExDzANBgNVBAcTBlZpZW5uYTEaMBgGA1UEChMRVGlhbmkgU3Bpcml0IEdtYkgxGTAX</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">BgNVBAsTEERlbW8gRW52aXJvbm1lbnQxEDAOBgNVBAMTB1Rlc3QgQ0ExMTAvBgkqhkiG9w0BCQEW</p><p style="margin:0px;font-size:12px;font-family:Helvetica">Im1hc3NpbWlsaWFuby5tYXNpQHRpYW5pLXNwaXJpdC5jb20wIBcNMTEwNzI3MDgyMTUyWhgPMjE5</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">MDEyMzEwODIxNTJaMIGbMQswCQYDVQQGEwJBVDEQMA4GA1UECBMHQXVzdHJpYTEaMBgGA1UEChMR</p><p style="margin:0px;font-size:12px;font-family:Helvetica">VGlhbmkgU3Bpcml0IEdtYkgxGTAXBgNVBAsTEERlbW8gRW52aXJvbm1lbnQxEDAOBgNVBAMTB3Nl</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">cnZlcjExMTAvBgkqhkiG9w0BCQEWIm1hc3NpbWlsaWFuby5tYXNpQHRpYW5pLXNwaXJpdC5jb20w</p><p style="margin:0px;font-size:12px;font-family:Helvetica">ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcEpmyaFK8aKKrvaFZL6IGttOwI3ImGCUi</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">wINIc+fcuVWRyT7Deb8tymnwVBfHVD/8Mh5ufwiS9YU774Ta2aB8H/Gwr5QIndu4eG9+adDEV3+D</p><p style="margin:0px;font-size:12px;font-family:Helvetica">i6e3HhiA/8RP8CXCMGY4LOAjaNwUh/EEsn1S2oa+Dsiff5Ba8wmddc6pyYiwmhDfwEF0YBXDjvB8</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">iexcLcOLvo/pl2hP87g/ptDXy0VUWWPzX9qxc6YtqhkS7EtmhzMW5deWvmRiPzJ2NVfCuvpcsK2T</p><p style="margin:0px;font-size:12px;font-family:Helvetica">ii+MgCYbLXCLYkCg+5ZpV7esrqb5hWOf2tKUsDlu/sjck2lflsWTE1woKr0tbp7IxLzvGKx9hERB</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">0hzJAgMBAAGjezB5MAkGA1UdEwQCMAAwLAYJYIZIAYb4QgENBB8WHU9wZW5TU0wgR2VuZXJhdGVk</p><p style="margin:0px;font-size:12px;font-family:Helvetica">IENlcnRpZmljYXRlMB0GA1UdDgQWBBQU7M3dSaInYi+0MCDYpbACOCjvBzAfBgNVHSMEGDAWgBRk</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">wihuUTlGpNDxrnZFbW84FXj72jANBgkqhkiG9w0BAQUFAAOCAQEAjEqNtOb2Hk6BpBDRXk9vd+0v</p><p style="margin:0px;font-size:12px;font-family:Helvetica">vJSOWvdZnL3I2Kr30oN6nQOMud68FPI1JC1QwLni05ZVDTyMYOk/HRPK2jSByFmLZECaE6Q5Z1BT</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">D9vR/AqtmTOvub922uS5gTpVEWijSW1o9j+LFzGC4k8l4xWidPtKa3o1aXSGcWSw0i1BKgxM3pMz</p><p style="margin:0px;font-size:12px;font-family:Helvetica">SvKieZ2KQaHgZSb7bfk4uR4kAaida5hv6kveiDKRRG+8AeBvBD5lofaqUaUN9q/YIOucc8gHQBzG</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">rmkObvyykzyPz5wddLmouqrZZqfufPTNh4whyABbXCPXsptDZZss8DlKS37rFVUKLHEhcfd1J+IO</p><p style="margin:0px;font-size:12px;font-family:Helvetica">ioaTnaPhgY/dXg==&lt;/ds:X509Certificate&gt;</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">            &lt;/ds:X509Data&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">          &lt;/ds:KeyInfo&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
        &lt;/ds:Signature&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">        &lt;saml2:Subject&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">          &lt;saml2:NameID Format=&quot;urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress&quot;&gt;doctor1&lt;/saml2:NameID&gt;</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">          &lt;saml2:SubjectConfirmation Method=&quot;urn:oasis:names:tc:SAML:2.0:cm:bearer&quot;/&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
        &lt;/saml2:Subject&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">        &lt;saml2:Conditions NotBefore=&quot;2013-11-19T14:50:29.098Z&quot; NotOnOrAfter=&quot;2013-11-19T18:10:29.098Z&quot;&gt;</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">          &lt;saml2:AudienceRestriction&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">            &lt;saml2:Audience&gt;<a href="http://ihe.connecthaton.xua/X-ServiceProvider-IHE-Connectathon" target="_blank">http://ihe.connecthaton.XUA/X-ServiceProvider-IHE-Connectathon</a>&lt;/saml2:Audience&gt;</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">          &lt;/saml2:AudienceRestriction&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">        &lt;/saml2:Conditions&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
        &lt;saml2:AuthnStatement AuthnInstant=&quot;2013-11-19T14:50:29.098Z&quot; SessionIndex=&quot;123456&quot; SessionNotOnOrAfter=&quot;2013-11-19T18:10:29.098Z&quot;&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
          &lt;saml2:AuthnContext&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">            &lt;saml2:AuthnContextClassRef&gt;urn:oasis:names:tc:SAML:2.0:ac:classes:Password&lt;/saml2:AuthnContextClassRef&gt;</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">          &lt;/saml2:AuthnContext&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">        &lt;/saml2:AuthnStatement&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
        &lt;saml2:AttributeStatement&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">          &lt;saml2:Attribute FriendlyName=&quot;XSPA Subject&quot; Name=&quot;urn:oasis:names:tc:xacml:1.0:subject:subject-id&quot; NameFormat=&quot;urn:oasis:names:tc:SAML:2.0:attrname-format:uri&quot;&gt;</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">            &lt;saml2:AttributeValue xmlns:xsi=&quot;<a href="http://www.w3.org/2001/XMLSchema-instance" target="_blank">http://www.w3.org/2001/XMLSchema-instance</a>&quot; xsi:type=&quot;xs:string&quot;&gt;SpiritDoctor1 Doctor1&lt;/saml2:AttributeValue&gt;</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">          &lt;/saml2:Attribute&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">          &lt;saml2:Attribute FriendlyName=&quot;XSPA Role&quot; Name=&quot;urn:oasis:names:tc:xacml:2.0:subject:role&quot; NameFormat=&quot;urn:oasis:names:tc:SAML:2.0:attrname-format:uri&quot;&gt;</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">            &lt;saml2:AttributeValue xmlns:xsi=&quot;<a href="http://www.w3.org/2001/XMLSchema-instance" target="_blank">http://www.w3.org/2001/XMLSchema-instance</a>&quot; xsi:type=&quot;xs:string&quot;&gt;Physician&lt;/saml2:AttributeValue&gt;</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">          &lt;/saml2:Attribute&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">          &lt;saml2:Attribute FriendlyName=&quot;XSPA Organization&quot; Name=&quot;urn:oasis:names:tc:xspa:1.0:subject:organization&quot; NameFormat=&quot;urn:oasis:names:tc:SAML:2.0:attrname-format:uri&quot;&gt;</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">            &lt;saml2:AttributeValue xmlns:xsi=&quot;<a href="http://www.w3.org/2001/XMLSchema-instance" target="_blank">http://www.w3.org/2001/XMLSchema-instance</a>&quot; xsi:type=&quot;xs:string&quot;&gt;SpiritSite1&lt;/saml2:AttributeValue&gt;</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">          &lt;/saml2:Attribute&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">          &lt;saml2:Attribute FriendlyName=&quot;XSPA Organization ID&quot; Name=&quot;urn:oasis:names:tc:xspa:1.0:subject:organization-id&quot; NameFormat=&quot;urn:oasis:names:tc:SAML:2.0:attrname-format:uri&quot;&gt;</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">            &lt;saml2:AttributeValue xmlns:xsi=&quot;<a href="http://www.w3.org/2001/XMLSchema-instance" target="_blank">http://www.w3.org/2001/XMLSchema-instance</a>&quot; xsi:type=&quot;xs:anyURI&quot;&gt;1.3.6.1.4.1.21998.1.901&lt;/saml2:AttributeValue&gt;</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">          &lt;/saml2:Attribute&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">          &lt;saml2:Attribute FriendlyName=&quot;XSPA Purpose of Use&quot; Name=&quot;urn:oasis:names:tc:xspa:1.0:subject:purposeofuse&quot; NameFormat=&quot;urn:oasis:names:tc:SAML:2.0:attrname-format:uri&quot;&gt;</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">            &lt;saml2:AttributeValue xmlns:xsi=&quot;<a href="http://www.w3.org/2001/XMLSchema-instance" target="_blank">http://www.w3.org/2001/XMLSchema-instance</a>&quot; xsi:type=&quot;xs:string&quot;&gt;TREATMENT&lt;/saml2:AttributeValue&gt;</p>
<p style="margin:0px;font-size:12px;font-family:Helvetica">          &lt;/saml2:Attribute&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">        &lt;/saml2:AttributeStatement&gt;</p><p style="margin:0px;font-size:12px;font-family:Helvetica">
</p><p style="margin:0px;font-size:12px;font-family:Helvetica">      &lt;/saml2:Assertion&gt;</p></div></div><div><br></div>-- <br>Massimiliano Masi<br><br><a href="http://www.mascanc.net/~max">http://www.mascanc.net/~max</a>
</div>