<div dir="ltr"><div dir="ltr"><div class="gmail_default" style="font-family:georgia,serif">Thank you so much for helping thus far. I still have some more questions.</div><div class="gmail_default" style="font-family:georgia,serif"><br></div><div class="gmail_default" style="font-family:georgia,serif">I would add the timestamp id to DocumentInternalIDContentReference like so:<br><div class="gmail_default"><br></div><div class="gmail_default">DocumentInternalIDContentReference reference = new DocumentInternalIDContentReference(timestamp.getWSUId());</div><div class="gmail_default">reference.getTransforms().add(SignatureConstants.TRANSFORM_C14N_EXCL_OMIT_COMMENTS);</div><div class="gmail_default">reference.setDigestAlgorithm(SignatureConstants.ALGO_ID_DIGEST_SHA1);</div><div class="gmail_default">Signature signature = getSignature(credential);</div><div class="gmail_default">signature.getContentReferences().add(reference);</div><div class="gmail_default"><br></div><div class="gmail_default">Then call Signer.signObject(signature);?</div></div></div></div><br><div class="gmail_quote"><div dir="ltr">On Tue, Oct 30, 2018 at 8:35 AM Binh Pham <<a href="mailto:btpham@gmail.com">btpham@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div dir="ltr"><div class="gmail_default" style="font-family:georgia,serif">I am trying to implement the NHIN SAML specs (<a href="https://sequoiaproject.org/wp-content/uploads/2014/11/nhin-authorization-framework-production-specification-v3.0.pdf" target="_blank">https://sequoiaproject.org/wp-content/uploads/2014/11/nhin-authorization-framework-production-specification-v3.0.pdf</a>) which the SAML token will appear in the header of the SOAP envelope for each request.</div><div class="gmail_default" style="font-family:georgia,serif">In this specs, there are two parts to the token which are the timestamp and an assertion. I need to sign the timestamp and the assertion. I don't see there is a way to sign the timestamp with the current version (v3) of the library. This is my first time using the library so any help would be appreciated.</div><div class="gmail_default" style="font-family:georgia,serif"><br></div><div class="gmail_default" style="font-family:georgia,serif">Thank you.</div><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
</blockquote></div></div></div>
</blockquote></div>