<div dir="ltr">Hi Lasse,<div><br></div><div>You can use</div><div>KeyInfoCredentialResolver keyInfoCredResolver = DefaultSecurityConfigurationBootstrap.buildBasicInlineKeyInfoCredentialResolver();<br></div><div><br></div><div>Or use SAMLTestSupport.buildBasicInlineKeyInfoResolver()</div><div><br></div><div>Thanks,</div><div>Punit</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Aug 16, 2016 at 2:25 PM, Lasse Højgaard <span dir="ltr"><<a href="mailto:lash@stibosystems.com" target="_blank">lash@stibosystems.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi all,<br>
<br>
I'm currently implementing SSO using OpenSAML. I have established trust between my IdP and the SP that I'm implementing.<br>
<br>
What I'm trying to do is: fetch the credential with usagetype "SIGNING" from the metadata of the IdP and validate that signature using a SignatureTrustEngine.<br>
What I have so far is this:<br>
<br>
        public SignatureTrustEngine getSignatureTrustEngine() throws ComponentInitializationExcepti<wbr>on{<br>
                BasicRoleDescriptorResolver basicRoleDescriptorResolver = new BasicRoleDescriptorResolver(<wbr>metadataResolver);<br>
                MetadataCredentialResolver mcr = new MetadataCredentialResolver();<br>
<br>
                mcr.setRoleDescriptorResolver(<wbr>basicRoleDescriptorResolver);<br>
                mcr.initialize();<br>
                KeyInfoCredentialResolver keyInfoCredentialResolver = mcr.<wbr>getKeyInfoCredentialResolver()<wbr>;<br>
                ExplicitKeySignatureTrustEngin<wbr>e trustEngine = new ExplicitKeySignatureTrustEngin<wbr>e(mcr, keyInfoCredentialResolver);<br>
                SignatureTrustEngine sigTrustEngine = trustEngine;<br>
                return sigTrustEngine;<br>
        }<br>
<br>
My question is:<br>
How do I get a KeyInfoCredentialResolver? I've looked at the documentation for V2.0 - but that doesn't help me much:<br>
<a href="https://wiki.shibboleth.net/confluence/display/OpenSAML/OSTwoUserManJavaDSIG" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/<wbr>confluence/display/OpenSAML/<wbr>OSTwoUserManJavaDSIG</a><br>
<br>
<br>
Lasse Højgaard<br>
Consultant<br>
<br>
Stibo Systems A/S<br>
  |  8270  |  Højbjerg  |  Denmark<br>
T <a href="tel:%2B45%2089%2039%2013%2023" value="+4589391323">+45 89 39 13 23</a>  |  M <a href="tel:%2B45%2020%2042%2045%2096" value="+4520424596">+45 20 42 45 96</a><br>
<a href="mailto:lash@stibosystems.com">lash@stibosystems.com</a>  | <br>
<span class="HOEnZb"><font color="#888888"><br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:dev-unsubscribe@shibboleth.net">dev-unsubscribe@shibboleth.net</a><br>
</font></span></blockquote></div><br></div>