Ask a Question related to ASP.NET Security, Design and Development.
-
Hari Menon #1
WSE 2.0: Extending SecurityTokenServiceClient to support SAML Assertions
In WSE 2.0, using the SecurityTokenServiceClient, I can
request for a SAML asertion by specifying
WSTrust.TokenTypes.SAMLAssertion while creating the
RequestSecurityToken object.
However, when my SecurityTokenService (a SAML Credentials
Collector) returns a SAML Assertion,
RequestSecurityTokenResponse does not recognize the SAML
assertion and it throws an exception!
After a bit of digging around, I found that the only
supported SecurityTokens are UsernameToken, KerberosToken
and X509SecurityToken. Now, I would like to extend it to
support a SAML Assertion.
Is RequestSecurityTokenResponse or
SecurityTokenServiceClient designed to be extensible? I
could not find any good virtual functions in these that I
can override to provide my implementation of a
SecurityToken.
Any help is appreciated.
Thanks
Hari
Hari Menon Guest
-
SAML and .NET?
I'm doing a scoping study for a Single-Sign-On integration project with a client. The client's SSO interface is built on SAML 1.1 specification... -
Signed SAML response in .net
Hi, I'm trying to verify a signed SAML reponse. It's an enveloped signature with following format: <Response ResponseID="xxx" >... -
SAML Module?
Is there a module that implements the SAML (Security Assertion Markup Language) protocol? If not, is someone already working on one? If so, do... -
extending Treenode: how?
In the documentation it says that the Treenode should not be inherited: why? I want to create a treenode that the checbox has 3 states (off, on,... -
Extending CF PoP.
Is there anyway to extend CFPoP to support additional encoding types? I am getting ' java.io.UnsupportedEncodingException: iso-3979-1. ' Could... -
Hari Menon #2
WSE 2.0: Extending SecurityTokenServiceClient to support SAML Assertions
In WSE 2.0, using the SecurityTokenServiceClient, I can
request for a SAML asertion by specifying
WSTrust.TokenTypes.SAMLAssertion while creating the
RequestSecurityToken object.
However, when my SecurityTokenService (a SAML Credentials
Collector) returns a SAML Assertion,
RequestSecurityTokenResponse does not recognize the SAML
assertion and it throws an exception!
After a bit of digging around, I found that the only
supported SecurityTokens are UsernameToken, KerberosToken
and X509SecurityToken. Now, I would like to extend it to
support a SAML Assertion.
Is RequestSecurityTokenResponse or
SecurityTokenServiceClient designed to be extensible? I
could not find any good virtual functions in these that I
can override to provide my implementation of a
SecurityToken.
Any help is appreciated.
Thanks
Hari
Hari Menon Guest



Reply With Quote

