<div dir="ltr">So i forgot i had a test case that generates an assertion and tries posting it. Here's the output:<div><br></div><div>
<p class="gmail-p1">14:33:09.631 [XNIO-2 task-1] DEBUG org.apache.xml.security.utils.DigesterOutputStream - <saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" Destination="<a href="http://sp.autoidm.com:9090/auth/SAML2Auth">http://sp.autoidm.com:9090/auth/SAML2Auth</a>" ID="f95f6d8ce505467a8f2388185c0ac5d808bdb99de" IssueInstant="2017-01-03T19:32:14.840Z" Version="2.0"></p>
<p class="gmail-p1"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">idp:test</saml2:Issuer></p>
<p class="gmail-p2"><br></p>
<p class="gmail-p1"><saml2p:Status></p>
<p class="gmail-p1"><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"></saml2p:StatusCode></p>
<p class="gmail-p1"></saml2p:Status></p>
<p class="gmail-p1"><saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="f0f0e8a00564a917e8cc9fbf8a0effe9b28ce40cb" IssueInstant="2017-01-03T19:32:14.840Z" Version="2.0"></p>
<p class="gmail-p1"><saml2:Issuer>idp:test</saml2:Issuer></p>
<p class="gmail-p1"><ds:Signature xmlns:ds="<a href="http://www.w3.org/2000/09/xmldsig#">http://www.w3.org/2000/09/xmldsig#</a>"></p>
<p class="gmail-p1"><ds:SignedInfo></p>
<p class="gmail-p1"><ds:CanonicalizationMethod Algorithm="<a href="http://www.w3.org/2001/10/xml-exc-c14n#">http://www.w3.org/2001/10/xml-exc-c14n#</a>"></ds:CanonicalizationMethod></p>
<p class="gmail-p1"><ds:SignatureMethod Algorithm="<a href="http://www.w3.org/2000/09/xmldsig#rsa-sha1">http://www.w3.org/2000/09/xmldsig#rsa-sha1</a>"></ds:SignatureMethod></p>
<p class="gmail-p1"><ds:Reference URI="#f0f0e8a00564a917e8cc9fbf8a0effe9b28ce40cb"></p>
<p class="gmail-p1"><ds:Transforms></p>
<p class="gmail-p1"><ds:Transform Algorithm="<a href="http://www.w3.org/2000/09/xmldsig#enveloped-signature">http://www.w3.org/2000/09/xmldsig#enveloped-signature</a>"></ds:Transform></p>
<p class="gmail-p1"><ds:Transform Algorithm="<a href="http://www.w3.org/2001/10/xml-exc-c14n#">http://www.w3.org/2001/10/xml-exc-c14n#</a>"></ds:Transform></p>
<p class="gmail-p1"></ds:Transforms></p>
<p class="gmail-p1"><ds:DigestMethod Algorithm="<a href="http://www.w3.org/2001/04/xmlenc#sha256">http://www.w3.org/2001/04/xmlenc#sha256</a>"></ds:DigestMethod></p>
<p class="gmail-p1"><ds:DigestValue>DYXiVWJSCF5uVEGD02Uh7sG/IutgdL8r6aN+UgbDA2s=</ds:DigestValue></p>
<p class="gmail-p1"></ds:Reference></p>
<p class="gmail-p1"></ds:SignedInfo></p>
<p class="gmail-p1"><ds:SignatureValue></p>
<p class="gmail-p1">bzpUxuozkD9raKuXbMzffxxVJdbDRzE9KC+yAvBoyYYALlWzZ9nNkHyMdf6UAeHGwKsPjv1pMl4y</p>
<p class="gmail-p1">gCUgOqzWEAc2ZIShMYB41ntjeiskpbXGmuAniBYMcTTvCBijuE+SouAnVotSZxZQhQ14EDX+cs1b</p>
<p class="gmail-p1">4YOVXamIGHeT8x4FSjW9fY5tHtIyKTFYDymCD0o50fF8/3QySJwcYBGn8sodCNWLkJH5B4OoqBam</p>
<p class="gmail-p1">lWwWPTxRseKBnXz0qYFxhxImvzBjyPPfMJ4+T7J4fYZNc3aVTht29dzw8eiSlVhcK7ez7diCwSa/</p>
<p class="gmail-p1">ucx01ON0aPGD9VnP59FjuLHMeMPv1aNazomoLw==</p>
<p class="gmail-p1"></ds:SignatureValue></p>
<p class="gmail-p1"></ds:Signature></p>
<p class="gmail-p1"><saml2:Subject></p>
<p class="gmail-p1"><saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">testsaml2</saml2:NameID></p>
<p class="gmail-p1"><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"></p>
<p class="gmail-p1"><saml2:SubjectConfirmationData NotOnOrAfter="2017-01-03T19:37:14.839Z" Recipient="<a href="http://sp.autoidm.com:9090/auth/SAML2Auth">http://sp.autoidm.com:9090/auth/SAML2Auth</a>"></saml2:SubjectConfirmationData></p>
<p class="gmail-p1"></saml2:SubjectConfirmation></p>
<p class="gmail-p1"></saml2:Subject></p>
<p class="gmail-p1"><saml2:Conditions NotBefore="2017-01-03T19:27:14.839Z" NotOnOrAfter="2017-01-03T19:37:14.839Z"></p>
<p class="gmail-p1"><saml2:AudienceRestriction></p>
<p class="gmail-p1"><saml2:Audience><a href="http://sp.autoidm.com:9090/auth/SAML2Auth">http://sp.autoidm.com:9090/auth/SAML2Auth</a></saml2:Audience></p>
<p class="gmail-p1"></saml2:AudienceRestriction></p>
<p class="gmail-p1"></saml2:Conditions></p>
<p class="gmail-p1"><saml2:AuthnStatement AuthnInstant="2017-01-03T19:32:14.840Z" SessionIndex="f0f0e8a00564a917e8cc9fbf8a0effe9b28ce40cb"></p>
<p class="gmail-p1"><saml2:AuthnContext></p>
<p class="gmail-p1"><saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef></p>
<p class="gmail-p1"></saml2:AuthnContext></p>
<p class="gmail-p1"></saml2:AuthnStatement></p>
<p class="gmail-p1"></saml2:Assertion></p>
<p class="gmail-p1"></saml2p:Response></p>
<p class="gmail-p1">14:33:09.647 [XNIO-2 task-1] WARN org.apache.xml.security.signature.Reference - Verification failed for URI "#f95f6d8ce505467a8f2388185c0ac5d808bdb99de"</p>
<p class="gmail-p1">14:33:09.647 [XNIO-2 task-1] WARN org.apache.xml.security.signature.Reference - Expected Digest: hflsn4G02ayke70RKTRhsJNIInlK6fRTNTxcwxopu8Q=</p>
<p class="gmail-p1">14:33:09.647 [XNIO-2 task-1] WARN org.apache.xml.security.signature.Reference - Actual Digest: /cYBcqmHn1M3KXhV5W7JREjyZ4r/Sw3MFWyp5XScacM=</p><div class="gmail_extra">So clearly the digests aren't being generated the same way...</div><div class="gmail_extra"><br></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Jan 3, 2017 at 12:56 PM, Marc Boorshtein <span dir="ltr"><<a href="mailto:mboorshtein@gmail.com" target="_blank">mboorshtein@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">I'm migrating my code base from OpenSAML 2 to 3 and have encountered an issue with the signatures being generated. I'm generating the below SAML response:<div><br></div><div><div><saml2p:Response xmlns:saml2p="urn:oasis:names:<wbr>tc:SAML:2.0:protocol"</div><div> xmlns:xsd="<a href="http://www.w3.org/2001/XMLSchema" target="_blank">http://www.w3.org/<wbr>2001/XMLSchema</a>"</div><div> Destination="<a href="http://shib2x.tremolo.lan/Shibboleth.sso/SAML2/POST" target="_blank">http://shib2x.<wbr>tremolo.lan/Shibboleth.sso/<wbr>SAML2/POST</a>"</div><div> ID="<wbr>fd2e829e77881b351b490d9dc19cff<wbr>85a27f7a8ea"</div><div> IssueInstant="2017-01-03T17:<wbr>26:51.255Z"</div><div> Version="2.0"</div><div> ></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><saml2:Issuer xmlns:saml2="urn:oasis:names:<wbr>tc:SAML:2.0:assertion"><a href="http://localhost.localdomain:6060/auth/idp/saml2" target="_blank">http://<wbr>localhost.localdomain:6060/<wbr>auth/idp/saml2</a></saml2:Issuer></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><ds:Signature xmlns:ds="<a href="http://www.w3.org/2000/09/xmldsig#" target="_blank">http://www.w3.org/<wbr>2000/09/xmldsig#</a>"></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><ds:SignedInfo></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><ds:CanonicalizationMethod Algorithm="<a href="http://www.w3.org/2001/10/xml-exc-c14n#" target="_blank">http://www.w3.org/<wbr>2001/10/xml-exc-c14n#</a>" /></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><ds:SignatureMethod Algorithm="<a href="http://www.w3.org/2000/09/xmldsig#rsa-sha1" target="_blank">http://www.w3.org/<wbr>2000/09/xmldsig#rsa-sha1</a>" /></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><ds:Reference URI="#<wbr>fd2e829e77881b351b490d9dc19cff<wbr>85a27f7a8ea"></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><ds:Transforms></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><ds:Transform Algorithm="<a href="http://www.w3.org/2000/09/xmldsig#enveloped-signature" target="_blank">http://www.w3.org/<wbr>2000/09/xmldsig#enveloped-<wbr>signature</a>" /></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><ds:Transform Algorithm="<a href="http://www.w3.org/2001/10/xml-exc-c14n#" target="_blank">http://www.w3.org/<wbr>2001/10/xml-exc-c14n#</a>"></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><ec:InclusiveNamespaces xmlns:ec="<a href="http://www.w3.org/2001/10/xml-exc-c14n#" target="_blank">http://www.w3.org/<wbr>2001/10/xml-exc-c14n#</a>"</div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> PrefixList="xsd"</div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> /></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span></ds:Transform></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span></ds:Transforms></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><ds:DigestMethod Algorithm="<a href="http://www.w3.org/2001/04/xmlenc#sha256" target="_blank">http://www.w3.org/<wbr>2001/04/xmlenc#sha256</a>" /></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><ds:DigestValue><wbr>ubwqWUjtEDYwRTJjadkpbqqyp36qSt<wbr>UdqKXNyNjSrXg=</ds:<wbr>DigestValue></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span></ds:Reference></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span></ds:SignedInfo></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><ds:SignatureValue></div><div>fFXh1Xh4sFVjtuc3jidXJsQ4+<wbr>HcMp9km8bHSrvAz6ZUoLaH49Hnv0aP<wbr>osagxSdja0//XgJRSf6x3</div><div>v0t67n4/<wbr>KLSFDyULJbe4rFjEFtxQL8AAtuUEgh<wbr>Qd3Hfwg4+<wbr>a1Pl6TKlrNVVi0g1l9EcA2QsrCx0R</div><div>HrleGjAO7e/zvK5tsg8=</div><div></ds:SignatureValue></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span></ds:Signature></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><saml2p:Status></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><saml2p:StatusCode Value="urn:oasis:names:tc:<wbr>SAML:2.0:status:Success" /></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span></saml2p:Status></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><saml2:Assertion xmlns:saml2="urn:oasis:names:<wbr>tc:SAML:2.0:assertion"</div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> ID="<wbr>fb777d662ef7f844d59a86196cf76b<wbr>9a85c606eac"</div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> IssueInstant="2017-01-03T17:<wbr>26:51.255Z"</div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> Version="2.0"</div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> ></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><saml2:Issuer><a href="http://localhost.localdomain:6060/auth/idp/saml2" target="_blank">http://<wbr>localhost.localdomain:6060/<wbr>auth/idp/saml2</a></saml2:Issuer></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><saml2:Subject></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><saml2:NameID Format="urn:oasis:names:tc:<wbr>SAML:1.1:nameid-format:<wbr>unspecified">testsaml2</saml2:<wbr>NameID></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><saml2:SubjectConfirmation Method="urn:oasis:names:tc:<wbr>SAML:2.0:cm:bearer"></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><saml2:SubjectConfirmationData NotOnOrAfter="2017-01-03T17:<wbr>31:51.254Z"</div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> Recipient="<a href="http://shib2x.tremolo.lan/Shibboleth.sso/SAML2/POST" target="_blank">http://shib2x.<wbr>tremolo.lan/Shibboleth.sso/<wbr>SAML2/POST</a>"</div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> /></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span></saml2:SubjectConfirmation></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span></saml2:Subject></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><saml2:Conditions NotBefore="2017-01-03T17:21:<wbr>51.254Z"</div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> NotOnOrAfter="2017-01-03T17:<wbr>31:51.254Z"</div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> ></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><saml2:AudienceRestriction></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><saml2:Audience><a href="http://shib2x.tremolo.lan/shibboleth" target="_blank">http://shib2x.<wbr>tremolo.lan/shibboleth</a></saml2:<wbr>Audience></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span></saml2:AudienceRestriction></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span></saml2:Conditions></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><saml2:AuthnStatement AuthnInstant="2017-01-03T17:<wbr>26:51.255Z"</div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> SessionIndex="<wbr>fb777d662ef7f844d59a86196cf76b<wbr>9a85c606eac"</div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> ></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><saml2:AuthnContext></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><saml2:AuthnContextClassRef><wbr>urn:oasis:names:tc:SAML:2.0:<wbr>ac:classes:<wbr>PasswordProtectedTransport</<wbr>saml2:AuthnContextClassRef></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span></saml2:AuthnContext></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span></saml2:AuthnStatement></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><saml2:AttributeStatement></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><saml2:Attribute Name="groupName"></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><saml2:AttributeValue xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance" target="_blank">http://www.w3.org/<wbr>2001/XMLSchema-instance</a>"</div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> xsi:type="xsd:string"</div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> >testUsers</saml2:<wbr>AttributeValue></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span></saml2:Attribute></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><saml2:Attribute Name="role"></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><saml2:AttributeValue xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance" target="_blank">http://www.w3.org/<wbr>2001/XMLSchema-instance</a>"</div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> xsi:type="xsd:string"</div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> >users</saml2:AttributeValue></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span></saml2:Attribute></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><saml2:Attribute Name="l"></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><saml2:AttributeValue xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance" target="_blank">http://www.w3.org/<wbr>2001/XMLSchema-instance</a>"</div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> xsi:type="xsd:string"</div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> >Boston</saml2:<wbr>AttributeValue></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span></saml2:Attribute></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span></saml2:AttributeStatement></div><div><span class="gmail-m_8514526174577823848gmail-Apple-tab-span" style="white-space:pre-wrap"> </span></saml2:Assertion></div><div></saml2p:Response></div></div><div><br></div><div>but everything i test against fails (Shib, OpenAM, ADFS). I tried validating it at <a href="http://samltool.com" target="_blank">samltool.com</a> but I get the error "Reference validation failed". The only issue I see in the reference section is its generating a sha256 digest rather then a sha1 digest the way my 2.x code did. Here's the code I used to generate the signature:</div><div><br></div><div>
<p class="gmail-m_8514526174577823848gmail-p1">BasicX509Credential <span class="gmail-m_8514526174577823848gmail-s1">signingCredential</span> = CredentialSupport.<wbr>getSimpleCredential(<span class="gmail-m_8514526174577823848gmail-s2">this</span>.<span class="gmail-m_8514526174577823848gmail-s3">sigCe<wbr>rt</span>, <span class="gmail-m_8514526174577823848gmail-s2">this</span>.<span class="gmail-m_8514526174577823848gmail-s3">sigKey</span>);</p>
<p class="gmail-m_8514526174577823848gmail-p2"><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span></p>
<p class="gmail-m_8514526174577823848gmail-p1"><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span>Signature <span class="gmail-m_8514526174577823848gmail-s1">signature</span> = OpenSAMLUtils.buildSAMLObject(<wbr>Signature.<span class="gmail-m_8514526174577823848gmail-s2">class</span>);</p>
<p class="gmail-m_8514526174577823848gmail-p2"><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span></p>
<p class="gmail-m_8514526174577823848gmail-p3"><span class="gmail-m_8514526174577823848gmail-s4"><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span></span>//SecurityHelper.<wbr>prepareSignatureParams(<wbr>signature, signingCredential, null, null);</p>
<p class="gmail-m_8514526174577823848gmail-p2"><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span></p>
<p class="gmail-m_8514526174577823848gmail-p2"><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span></p>
<p class="gmail-m_8514526174577823848gmail-p1"><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-s1">signature</span>.<wbr>setSigningCredential(<span class="gmail-m_8514526174577823848gmail-s1">signingCr<wbr>edential</span>);</p>
<p class="gmail-m_8514526174577823848gmail-p1"><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-s1">signature</span>.<wbr>setSignatureAlgorithm(<wbr>SignatureConstants.<span class="gmail-m_8514526174577823848gmail-s3">ALGO_ID_<wbr>SIGNATURE_RSA_SHA1</span>);</p>
<p class="gmail-m_8514526174577823848gmail-p1"><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-s1">signature</span>.<wbr>setCanonicalizationAlgorithm(<wbr>SignatureConstants.<span class="gmail-m_8514526174577823848gmail-s3">ALGO_ID_<wbr>C14N_EXCL_OMIT_COMMENTS</span>);</p>
<p class="gmail-m_8514526174577823848gmail-p2"><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span></p>
<p class="gmail-m_8514526174577823848gmail-p1"><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-s1">r</span>.setSignature(<span class="gmail-m_8514526174577823848gmail-s1">signature</span>); </p>
<p class="gmail-m_8514526174577823848gmail-p3"><span class="gmail-m_8514526174577823848gmail-s4"><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span></span>//Element e = Configuration.<wbr>getMarshallerFactory().<wbr>getMarshaller(r).<span class="gmail-m_8514526174577823848gmail-s5">marshall</span>(r); </p>
<p class="gmail-m_8514526174577823848gmail-p2"><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span></p>
<p class="gmail-m_8514526174577823848gmail-p1"><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-s2">try</span> {</p>
<p class="gmail-m_8514526174577823848gmail-p1"><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span> XMLObjectProviderRegistrySuppo<wbr>rt.getMarshallerFactory().<wbr>getMarshaller(<span class="gmail-m_8514526174577823848gmail-s1">r</span>).marshall(<span class="gmail-m_8514526174577823848gmail-s1">r</span>);</p>
<p class="gmail-m_8514526174577823848gmail-p1"><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span> } <span class="gmail-m_8514526174577823848gmail-s2">catch</span> (MarshallingException <span class="gmail-m_8514526174577823848gmail-s1">e</span>) {</p>
<p class="gmail-m_8514526174577823848gmail-p1"><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span> <span class="gmail-m_8514526174577823848gmail-s2">throw</span> <span class="gmail-m_8514526174577823848gmail-s2">new</span> RuntimeException(<span class="gmail-m_8514526174577823848gmail-s1">e</span>);</p>
<p class="gmail-m_8514526174577823848gmail-p1"><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span> }</p>
<p class="gmail-m_8514526174577823848gmail-p2"><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span></p>
<p class="gmail-m_8514526174577823848gmail-p1"><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span><span class="gmail-m_8514526174577823848gmail-Apple-tab-span"> </span>Signer.signObject(<span class="gmail-m_8514526174577823848gmail-s1">signature</span>); </p><p class="gmail-m_8514526174577823848gmail-p1"><br></p><p class="gmail-m_8514526174577823848gmail-p1">I got the code out of "<strong style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:14px;background-color:rgb(248,247,239)"><a href="https://gumroad.com/l/ypPk" class="gmail-m_8514526174577823848external-link" rel="nofollow" style="color:rgb(50,96,186)" target="_blank">A Guide to OpenSAML V3</a>"</strong></p><p class="gmail-m_8514526174577823848gmail-p1"><br></p><p class="gmail-m_8514526174577823848gmail-p1">Thoughts?</p><p class="gmail-m_8514526174577823848gmail-p1">Thanks</p></div></div>
</blockquote></div><br></div></div></div>