Help needed to create XML message in SAML response attribute

Mon May 20 10:27:26 EDT 2013

Hi Scott,

1)
Thanks for your information. I am able to log the request and response now.

I am using standard Shibboleth Authentication Engine for IdP implementation
in which the request from SP comes directly to Shibboleth SSO and I am using
external login handler to ask the user name credentials ( my JAVA
application code ). After successful login I am invoking below call from my
JAVA code 

AuthenticationEngine.returnToAuthenticationEngine( req, resp );

and giving control back to Authentication Engine and Auth Engine is sending
the response back to SP. In this scenario my JAVA code dont have control on
the response. I am using attribute-filter.xml/attribute-resolver.xml to
control the attributes.

I want to store the same SAML response in the database before relaying it to
SP. For this I have created JAVA DB interface. How do I intercept and send
the SAML response alone to JAVA DBI before relaying to the SP.

2)

You mentioned   --- 'That's a fairly bad idea but that aside, I think you
have to write a
custom attribute definition to do that. '

I am completely new to SAML world and is there any documentation on how to
write custom attribute. In my scenario, how do I invoke standard
attribute-filter/resolver files for few attributes and custom attributes for
few other attributes in the saml response.

3) SP is sending SAML request with NameIDFormat.
 Eg:
<samlp:NameIDPolicy
        xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
        Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"
        AllowCreate="true">
    </samlp:NameIDPolicy>

How do resolve my NameIDFormat issue since I need to send few String
attributes and one XML message in SAML response.

So if I want to send the SubjectDN, couple of application specific
attributes ( probably as xsi:type="SAML2String") and one xml message in SAML
response, what is the best approach. how do I configure my
attribute-resolver/filter.xml files. 

To send the xml messages in the attribute what should be the xsi:type in
attribute-resolver/fileter xml ??

Eg:   <saml2:AttributeStatement>
             <saml2:Attribute 
                Name="TestAttr1" 

NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml2:AttributeValue 
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                     xsi:type="xs:string">
                   Test1 
                </saml2:AttributeValue>
            </saml2:Attribute>
            <saml2:Attribute 
                Name="TestAttr2" 

NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml2:AttributeValue 
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                       xsi:type="xs:string"> =========>??? ( what should be
the type for XML msg)
                    <?xml version="1.0" encoding="ISO-8859-1"?> 
                    <note>  
                     <to>Tove</to>
                      <from>Jani</from>  
                     <heading>Reminder</heading>  
                     <body>Don't forget me this weekend!</body>  
                    </note>
                 </saml2:AttributeValue>
            </saml2:Attribute>
            <saml2:Attribute 
                Name="SubjectDN" 

NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                 <saml2:AttributeValue 
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                    xsi:type="xs:string">
                     cn=tt,ou=uu,o=bb,o=oo 
                </saml2:AttributeValue>
            </saml2:Attribute>  
            <saml2:Attribute 
                Name=&quot;&lt;b>usrname*" 

NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                 <saml2:AttributeValue 
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                    xsi:type="xs:string">
                     username1 
                </saml2:AttributeValue>
            </saml2:Attribute>  
            <saml2:Attribute 
                Name=&quot;&lt;b>designation*" 

NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                 <saml2:AttributeValue 
                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                    xsi:type="xs:string">
                     manager 
                </saml2:AttributeValue>
            </saml2:Attribute>  

  </saml2:AttributeStatement>

Thanks for your time.

Regards,
Kotesh

--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Help-needed-to-create-XML-message-in-SAML-response-attribute-tp7586843p7586857.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.